Command control system of a commanded system via a graphic interface and associated control method

A command control system of a commanded system commanded via a graphic interface by an operator, the commanded system operating in a critical environment, the control system comprising:

• a first control subsystem comprising a first computing module able to acquire interaction data describing the interactions of the operator related to the graphic interface, associate these interaction data with a command, and generate a command signal corresponding to this command;
• a second control subsystem comprising a first computing module able to acquire the command signal, verify the compatibility of the command corresponding to the command signal with an operational context defining an operation of the critical environment with a high operating safety objective in said critical environment, and, when the command is compatible with the operational context, generate a confirmation signal corresponding to this command;
• and
• a third control subsystem able to acquire the command signal and the confirmation signal, and to consolidate the signals in order to generate a resultant command signal intended to command the commanded system;
• wherein the second control subsystem further comprises a second computing module independent of the first computing module and able to execute the same tasks as the first computing module of this second control subsystem, the second computing module of the second control subsystem then being able to generate another confirmation signal.