摘要 |
<p>A method and apparatus for recovering a real-time computer system by running (steps 33-34) multiple versions of an operational program including multiple data partitions are described wherein each of the multiple data partitions is associated with one version of the operational program and wherein one of the versions of the operational program is a 'controller' program and the other versions are 'identity observer' programs. When the controller memory partition is damaged (step 35) the damaged memory is overwritten (step 37) with fault-free data.</p> |