| 摘要 |
<p>An automatic flight control system that is software fault tolerant fail operational in response to a first generic failure utilises two independent subsystems (20, 50) each including a dual channel flight control computer. One channel (21, 51) in each flight control computer includes a digital processor (24, 54) and the other channel includes two digital processors (28,29,58, 59). Cross-channel monitoring (84, 96) is included in each flight control computer to discern disagreements between the outputs of the channels. If disagreement occurs between one of the two processing elements (28, 29) in the channel (22) including two processing elements and the processing element (24) of the channel (21) having one processing element, the involved processing element in the two-element channel is disabled. If both processing elements in the two element channel disagree with the processing element in the other channel, the subsystem is disabled. All of the processing elements perform identical tasks. The three processing elements in each subsystem provide dissimilar data processing with respect to each other. The processing elements in the single element channels provide dissimilar data processing with respect to each other. Only three unique types of dissimilar data processing are utilised.</p> |
