| 摘要 |
A system comprising replicated sub-systems (x, Y, Z) the outputs (5, 6, 7) of which are consolidated to provide a single output (9) by a majority voter (8) for reliability and availability. The integrity of the system, i. e. confidence in the single consolidated output (9), is provided by an electronic coincidence checking (10) arrangement which involves several levels of checking. A first level of checking is carried out on all sub-system outputs (5, 6, 7) by circuits in each sub-system channel. Thus, each channel assesses the other channels and itself for coincidence. These assessments (X<1> Y<1> Z<1>; X<2> Y<2> Z<2>; X<3> Y<3> Z<3>) are then consolidated in respect of each sub-system at a second level and the final result (11, 12, 13) employed as an inhibit or power supply disabling control if a fault is declared in one sub-system. |
