METHOD FOR OPERATING A FAIL-SAFE MULTI-COMPUTER SYSTEM WITH SOME NOT FAIL-SAFE INPUT/OUTPUT UNITS

摘要

The multi-processor system (RS1) continuously checks the data items transmitted via separate channels and which are present in the input/output modules (E/A11,E/A12) of its individual processors, for correspondence. When deviations occur, the multi-processor system carries out redundancy checks and determines from the result of these checks the input/output module (for example E/A11) which is defective in each case. The data traffic is then handled for a particular time via an input/output module (E/A12) which is still intact. During this time, data items are transmitted with higher redundancy than during the correct operating state of all input/output modules.