| 摘要 |
PURPOSE:To improve the reliability of a system by dividing a program in each function unit and at the occurrence of a fault, separating an abnormal function unit program and a function unit program related to the former program to continue the operation of the system. CONSTITUTION:An individual function controlling part A supervises each function unit program. At the generation of a fault, each of monitoring and controlling circuits A1-An locks the execution of a function unit program to be assigned by a command from a separation controlling part C. At the detection of the fault, a detection signal is sent to a working matrix part B. Therefore, the function unit program runs by an indication from the control part A. The working matrix part B is prepared in consideration of the necessity of separation of other unit programs following the separation of one unit program and the correlation is obtained by the matrix. |
