Method for operating a safety-critical computer system
OwnerFrank Traenkle, Panagiotis Kosiorisinventors
Life of this patent
Estimating the term…
Abstract
A method for operating a safety-critical computer system which has at least two redundant channels for processing a calculation task. The channels generate results for the calculation task independently of one another. The health status of each individual channel is monitored separately. A separate decider for enabling or blocking output of the results is connected downstream of each channel. Depending on the health status of the channels, at most one of these channels is enabled for output of the results. It is ensured with the aid of a token that output of the results is blocked for all other channels.
Claims10
A method for operating a safety-critical computer system which has at least two redundant channels for processing a calculation task, the method comprising the following steps:
- generating results for the calculation task by the channels independently of one another;
- monitoring a health status of each individual channel of the channels separately;
- wherein a separate decider for enabling or blocking output of the results is connected downstream of each of the channels, and depending on the health status of the channels, enabling at most one of the channels for output of the results, wherein it is ensured using a token that output of the results is blocked for all other channels of the channels.
A computer system, comprising:
- two redundant channels for processing a calculation task, wherein the channels generate results for the calculation task independently of one another, and a health status of each individual channel is monitored separately;
- and
- a separate downstream decider for each channel, for enabling or blocking output of the results;
- wherein, depending on the health status of the channels, at most one of these channels is enabled for output of the results, wherein it is ensured using a token that output of the results is blocked for all other channels.
Dependencies are inferred from the claim text.