Architecture using integrated backup control and protection hardware

An electronic control configuration, comprising:

• a first primary control operable to control a device;
• a first secondary control operable to assume protection control of the device if the first primary control experiences a first type of failure;
• a second primary control operable to control the device in response to the first primary control experiencing a second type of failure;
• and
• a second secondary control operable to assume protection control of the device if the second primary control experiences the first type of failure, at least one of the secondary controls being operable to assume backup control of the device if both the first and second primary controls experience the second type of failure.

A method of electronically controlling a device, comprising:

• controlling a device using a first primary control microprocessor;
• assuming protection control of the device using a first secondary microprocessor in response to the first primary control microprocessor experiencing a first type of failure;
• controlling the device using a second primary control microprocessor in response to the first primary control microprocessor experiencing a second type of failure;
• assuming protection control of the device using a second secondary microprocessor in response to the second primary control microprocessor experiencing the first type of failure;
• and
• assuming backup control of the device using one of the secondary microprocessors in response to the first primary control microprocessor and the second primary control microprocessor experiencing the second type of failure.