| 摘要 |
PURPOSE:To reduce the possibility executing erroneously lead-in of a main system even if a microcomputer of a control part has run away, by executing a main system lead-in control of the control part by two software outputs, in a control device having the control part of a double system. CONSTITUTION:In a control part 10, an output of a microcomputer 12 is outputted to a switching part 20 through an output buffer 11 which has been coupled by a bus. In the switching part 20, two outputs of the control part 10 are connected so as to drive a relay 21 for controlling a main system setting part 22 under an AND condition. In case the microcomputer 12 has executed an access to an unmounted area due to its runaway, it becomes an address error, and the microcomputer is stopped or reset. Accordingly, a data from an address X2000 is written to an address of an output 1, but in the next unmounted area, an operation of the microcomputer is stopped, and the data is not written to an output 2. Accordingly, even in case of a runaway, no main system lead-in is generated. |
