| 摘要 |
A fail-safe system for a multiple task control system which has a plurality of control channels for performing mutually independent and mutually distinct control functions is detective of failure in one of the control channel. In response, the fail-safe system performs discrimination whether failure occurs at a common sensor which is commonly utilized for more than one control channels or a common control channel which are commonly used for more than one control channels, and other sensors for monitoring parameters to be used for a singular control channel or individual control channel for single control function. The fail-safe system performs mutually distinct modes of fail-safe operation depending upon the result of discrimination. |
