Fault tolerant computer employing double-redundant structure

A fault tolerant computer comprising plural operations controllers, wherein when one of the operation controllers is damaged, the damaged operation controller is identified and separated from the system of the fault tolerant computer, and

• the fault tolerant computer has a double-redundant structure including two of the operation controllers, and the double-redundant structure has:
• a diagnosis section, connected to both the operation controllers, for obtaining from each operation controller additional diagnosis information for identifying and separating the damaged operation controller when one of the two operation controllers is damaged;
• and
• two judgment sections connected to each operation controller and connected to each other, each judgment section for
• comparing an output from the operation controller connected to the present judgment section with an output from the operation controller connected to the other judgment section, and
• receiving a signal indicating a result of the comparison from the other judgment section, and collating this signal and a result of the comparison obtained in the present section with reference to the diagnosis information so as to judge whether the output from the operation controller connected to the present judgment section is correct.