Fault-tolerant computer and method of controlling data transmission

A method of controlling data transmission in a fault-tolerant computer having a pair of duplicate systems, each of said duplicate systems comprising a CPU subsystem for controlling access to a CPU and a storage unit, and an IO subsystem for controlling data which are input to said IO subsystem from an external circuit and data output from said IO subsystem to the external circuit, wherein said CPU systems of the duplicate systems operate identically to each other based on a common internal clock according to a lock-step system, and said IO subsystems of the duplicate systems are connected to each other through a cross link, said method comprising the steps of:

• controlling said CPU subsystem to receive data sent from said IO subsystem, and when the amount of the received data reaches a first threshold value, controlling said CPU subsystem to send a first signal to said IO subsystem, and when the amount of the received data reaches a second threshold value greater than said first threshold value, controlling said CPU subsystem to send a second signal to said IO subsystem;
• and
• controlling said IO subsystem to stop sending data to said CPU subsystem when said IO subsystem receives said first signal and said second signal, and to send said second signal to the paired IO subsystem through said cross link after said IO subsystem receives said second signal.