Patent ID: 9563523
Date: 2017-02-07
CPC Classifications: G06F

Claim:
1. An integrated fail-silence and fail-operational control system comprising: a primary controller controlling features of devices while operating under non-fault operating conditions; a secondary controller including a fail detector/decider module, the fail detector/decider module monitoring faults in the primary controller and the secondary controller, the fail detector/decider module determining whether the fault in the primary controller is associated with a fail-silence requirement or a fail-operational requirement, wherein if the fail detector/decider module determines the fault is a fail-silence requirement, then the fail detector/decider actuates a shutdown command to the primary controller to shut down a feature affected by the fault where the feature becomes non-operational, and wherein if the fail detector/decider module determines that the feature associated with the fault is a fail-operational requirement, then the fail detector/decider module signals the primary controller to relinquish controls of the feature to the secondary controller, wherein secondary controller functions as a high assurance system for controlling the feature in a fail-operational mode.