| 摘要 |
<p>A flight control computer system includes a plurality of computing channels (11 , 21 , and 31 ) where each computing channel further includes a main processor (113) and a monitor processor (114) under control of distinct operating systems. When the main processor and the monitor processor miscompare, cross-channel failure discretes (131 ) are transmitted to the other computing channels and a local generic fault discrete is armed. When the local generic fault discrete is armed and cross-channel failure discretes (141 , 142) are received from the other computing channels, a program interrupt (133) is issued causing the main processor to execute a minimal fully tested 'get home' software package (150).</p> |
