Patent ID: 9372774
Filing Date: 2016-06-21
CPC Classification: G06F

Claim Text:
1. A redundant computing architecture comprising: a first, primary, control unit configured to provide a first control signal having a first magnitude in response to a sensory input and to provide a health status indicator indicative of a fault condition within the first control unit, wherein the first control signal is configured to operate an actuator; a second, backup, control unit configured to provide a second control signal having a second magnitude in response to the sensory input, wherein the second control signal is configured to operate the actuator; a switch configured to receive the health status indicator, the first control signal, and second control signal; wherein the switch is configured to provide the first control signal to the actuator if the health status indicator does not indicate a fault within the first control unit; wherein the switch is configured to provide an indicator indicative of a fault within the first control unit and to provide the second control signal to the actuator if the health status indicator does indicate a fault within the first control unit; wherein the switch is configured to determine an absolute difference between the first magnitude and the second magnitude, compare the absolute difference to a threshold, and provide the indicator if the absolute difference exceeds the threshold; wherein the indicator includes a limited operation signal provided to each of the first control unit and the second control unit; and wherein the limited operation signal is configured to prevent further operation of both the first control unit and the second control unit following a predefined event.