| 摘要 |
A flight control computer system includes a plurality of computing channels ( 11, 21 , and 31 ) where each computing channel further includes a main processor ( 113 ) and a monitor processor ( 114 ) under control of distinct operating systems. When the main processor and the monitor processor miscompare, cross-channel failure discretes ( 131 ) are transmitted to the other computing channels and a local generic fault discrete is armed. When the local generic fault discrete is armed and cross-channel failure discretes ( 141, 142 ) are received from the other computing channels, a program interrupt ( 133 ) is issued causing the main processor to execute a minimal fully tested 'get home' software package ( 150 ).
|
