| 摘要 |
<p><P>PROBLEM TO BE SOLVED: To realize switching from the active system to an auxiliary system while preventing access from a process remaining in a control signal processing unit of old active system to a data transfer processing unit, when a failure is caused in a partial software process during its operation in a control signal processing unit of active system. <P>SOLUTION: A condition monitoring unit 25 monitors each software process in a control signal processing unit 11 to which the unit 25 belongs and if there is a process in which a failure is recognized, the control signal processing unit 11 to which the condition monitoring unit belongs is shut down. If the shut-down control signal processing unit 11 is the one which has been operated as the active system until that moment and the condition monitoring unit itself is in a standby state as an auxiliary system, the condition monitoring unit itself is switched to the active system. <P>COPYRIGHT: (C)2007,JPO&INPIT</p> |
