Method and apparatus for fault-detection

Claim 3

A fault-tolerant method for transferring information signals on a signal transfer bus in response to an actuation request, comprising the steps of A. providing said data transfer bus with a switching section responsive to plural switching signals for gatably transferring said data signals on that signal transfer bus, B. providing first and second processing elements, each normally responding to said actuation request for generating a first set of switching signals, said first set of switching signals including at least one, but not all, of said plural switching signals, C. outputting the first set of switching signals generated by said first processing element for application to said switching section, D. synchronizing said first and second processing elements by comparing, with said second processing element, the first set of switching signals generated thereby with those output by said first processing element, E. generating, after synchronization, with each of said first and second processing elements, a second set of switching signals, said second set of switching signals including at least one, but not all, of said plural switching signals, said first and second subsets of switching signals together making up said plural switching signals, and F. outputting the second set of switching signals generated by said second processing element for application to said switching section.

Claim 4

A fault-tolerant method for transferring information signals on a signal transfer bus in response to an actuation request, comprising the steps of A. providing said data transfer bus with a switching section responsive to plural switching signals for gatably transferring said data signals on that signal transfer bus, B. providing first and second processing elements, each normally responding to said actuation request for generating a first set of switching signals, said first set of switching signals including at least one, but not all, of said plural switching signals, C. outputting the first set of switching signals generated by said first processing element for application to said switching section, D. synchronizing said first and second processing elements by comparing, with said second processing element, the first set of switching signals generated thereby with those output by said first processing element, E. generating, after synchronization, with each of said first and second processing elements, a second set of switching signals, said second set of switching signals including at least one, but not all, of said plural switching signals, said first and second subsets of switching signals together making up said plural switching signals, and F. outputting the second set of switching signals generated by said second processing element for application to said switching section.

Claim 5

A fault-tolerant method for selectively applying at least one of plural control signals to an apparatus in response to an actuation request, comprising the steps of A. providing a signal transfer bus capable of transferring said plural control signals to said apparatus, said signal transfer bus including a switching section for gatably transferring a selected control signal to said apparatus in response to plural respective switching signals associated with that control signal, B. providing first and second processing elements, each normally responding to an actuation request for generating a first set of switching signals, said first set of switching signals including at least one, but not all, of the plural switching signals associated with a control signal associated with that actuation request, C. outputting the first set of switching signals generated by said first processing element for application to said switching section, D. synchronizing said first and second processing elements by comparing, with said second processing element, the first set of switching signals generated thereby with those output by said first processing element, E. generating, after synchronization, with each of said first and second processing elements, a second set of switching signals, said second set of switching signals including at least one, but not all, of said plural switching signals associated with the control signal associated with that actuation request, said first and second subsets of switching signals together making up the plural switching signals associated with that actuation request, and F. outputting the second set of switching signals generated by said second processing element for application to said switching section.

Claim 6

A fault-tolerant method for selectively applying at least one of plural control signals to an apparatus in response to an actuation request, comprising the steps of A. providing a signal transfer bus capable of transferring said plural control signals to said apparatus, said signal transfer bus including a switching section for gatably transferring a selected control signal to said apparatus in response to plural respective switching signals associated with that control signal, B. providing first and second processing elements, each normally responding to an actuation request for generating a first set of switching signals, said first set of switching signals including at least one, but not all, of the plural switching signals associated with a control signal associated with that actuation request, C. outputting the first set of switching signals generated by said first processing element for application to said switching section, D. synchronizing said first and second processing elements by comparing, with said second processing element, the first set of switching signals generated thereby with those output by said first processing element, E. generating, after synchronization, with each of said first and second processing elements, a second set of switching signals, said second set of switching signals including at least one, but not all, of said plural switching signals associated with the control signal associated with that actuation request, said first and second subsets of switching signals together making up the plural switching signals associated with that actuation request, and F. outputting the second set of switching signals generated by said second processing element for application to said switching section.

Claim 8

A method according to claim 4, the further improvement wherein at least one of said synchronizing and resynchronizing steps comprise the step of generating a fault signal indicative of at least selected miscomparison of the compared switching signals.

Claim 9

A method according to claim 5, the further improvement comprising the step of responding to said fault signal for inhibiting at least the second outputting step.

Claim 12

A method according to claim 8, the further improvement wherein A. said providing step includes the step of providing, as each said first and second processing elements, a programmable logic element for executing a sequence of instructions, and B. said providing step further includes providing said first processing element with an output latch that is enabled to output said first set of switching signals, but is disabled from outputting said second set of switching signals, C. said providing step Further includes providing said second processing elements with an output latch that is disabled from outputting said first set of switching signals, but is enabled to output said second set of switching signals, and D. each said outputting steps includes the step of executing on the programmable logic elements of each of said first and second processing elements substantially identical sequences of instructions that would otherwise result in each of those programmable logic elements outputting a respective set of switching signals.

Claim 14

In a digital data processing apparatus, the improvement for fault-tolerant actuation of a functional unit in response to an actuation request comprising A. switching section means, coupled to said functional unit, for responding to application of plural switching signals for activating that functional unit, B. first and second processing means, coupled to said switching section means, each processing means for normally responding to an actuation request for generating a first set of switching signals, said first set of switching signals including at least one, but not all, of said plural switching signals, C. said first processing means including means for outputting the first set of switching signals for application to said switching section means, D. said second processing means including synchronizing means for comparing the first set of switching signals generated by said second processing means with those output by said first processing means, E. said first and second processing means further including means tier generating a second set of switching signals, said second set of switching signals including at least one, but not all, of said plural switching signals, said first and second subsets of switching signals together making up said plural switching signals, and F. said second processing means includes means for outputting the second set of switching signals for application to said switching section means.

Claim 15

In a digital data processing apparatus, the improvement for fault-tolerant actuation of a functional unit in response to an actuation request comprising A. switching section means, coupled to said functional unit, for responding to application of plural switching signals for activating that functional unit, B. first and second processing means, coupled to said switching section means, each processing means for normally responding to an actuation request for generating a first set of switching signals, said first set of switching signals including at least one, but not all, of said plural switching signals, C. said first processing means including means for outputting the first set of switching signals for application to said switching section means, D. said second processing means including synchronizing means for comparing the first set of switching signals generated by said second processing means with those output by said first processing means, E. said first and second processing means further including means tier generating a second set of switching signals, said second set of switching signals including at least one, but not all, of said plural switching signals, said first and second subsets of switching signals together making up said plural switching signals, and F. said second processing means includes means for outputting the second set of switching signals for application to said switching section means.

Claim 18

Fault-tolerant circuitry for selectively applying at least one of plural control signals to an apparatus in response to an actuation request, comprising A. signal transfer bus capable of transferring said plural control signals to said apparatus, said signal transfer bus including a switching section for gatably transferring a selected control signal to said apparatus in response to plural respective switching signals associated with that control signal, B. first and second processing means, coupled to said switching section means, each processing means for normally responding to an actuation request for generating a first set of switching signals, said first set of switching signals including at least one, but not all, of said plural switching signals associated with a control signal associated with that actuation request, C. said first processing means including means for outputting the first set of switching signals for application to said switching section means, D. said second processing means including synchronizing means for comparing the first set of switching signals generated by said second processing means with those output by said first processing means, E. said first and second processing means further including means for generating a second set of switching signals, said second set of switching signals including at least one, but not all, of said plural switching signals, said first and second subsets of switching signals together making up said plural switching signals, and F. said second processing means includes means for outputting the second set of switching signals for application to said switching section means.

Claim 19

Fault-tolerant circuitry for selectively applying at least one of plural control signals to an apparatus in response to an actuation request, comprising A. signal transfer bus capable of transferring said plural control signals to said apparatus, said signal transfer bus including a switching section for gatably transferring a selected control signal to said apparatus in response to plural respective switching signals associated with that control signal, B. first and second processing means, coupled to said switching section means, each processing means for normally responding to an actuation request for generating a first set of switching signals, said first set of switching signals including at least one, but not all, of said plural switching signals associated with a control signal associated with that actuation request, C. said first processing means including means for outputting the first set of switching signals for application to said switching section means, D. said second processing means including synchronizing means for comparing the first set of switching signals generated by said second processing means with those output by said first processing means, E. said first and second processing means further including means for generating a second set of switching signals, said second set of switching signals including at least one, but not all, of said plural switching signals, said first and second subsets of switching signals together making up said plural switching signals, and F. said second processing means includes means for outputting the second set of switching signals for application to said switching section means.