Abstract:
A logic unit operable under the Byzantine algorithm for the architectural configuration of a composite assembly which tolerates an amount of F errors in simultaneous manner as to time and a plurality of inputs for in-reading of data into registers of a set of registers, and a plurality of outputs for out-reading of data from the registers, whereby each output is connectable with an input of a further logic unit, whereby the registers are coupled with the inputs and outputs in such a manner that each register is capable of being read-in and being capable of being read-out independently of the position of the logic unit within the assembly, by means of a position invariant, relative identification, as well as a computer unit with such a logic unit, as well as the fault-tolerant assembly of such logic/computer units, and a method of operating a fault tolerant assembly.

Description:
BACKGROUND OF THE INVENTION 
     1. Field of the Invention 
     This present invention may relate to a logic unit for the configuration of an architecture that is simultaneous-as-to-time and operable under the Byzantine algorithm and that tolerates a plurality F of faults, with a plurality of inputs for in-reading of data into registers of a set of registers and a plurality of outputs for out-reading of data from the registers, whereby each output is adapted to be connected with an input of a further logic unit. Furthermore, the present invention may relate to a computer unit with such logic unit, as well as to the fault tolerant assembly of at least 3F+1 logic units or computer units. Finally, the present invention may relates also to a method of operating a fault tolerant assembly with at least 3F+1 of such logic units or computer units with F+1 data distributing cycles. 
     2. Background Information 
     Fault tolerant computers of this type are known, for example, from German Patent No. 44 01 168 C2. They operate under the Byzantine algorithm as described in German Patent No. 44 01 168 C2, as well as in the paper by Leslie Lamport, Robert Shostak, and Marshall Pease, entitled “The Byzantine Generals Problem”, ACM Transaction on Programming Languages and Systems (TOPLAS), Volume 4, Number 3, July 1982, pages 382-401. The Byzantine algorithm is comprised essentially of a redundant data processing with a plurality of computer units operating in parallel which under this algorithm distribute data, in a manner which will be explained in greater detail below, and compare the data. Fault tolerant computers of this type are comprised of an assembly of 3F+1 computer units RE 1  to RE(3F+1). Such computer units are, for example, for F=1, in accordance with FIG. 5, connected to one another in such a manner so that each computer unit can directly exchange data with any other computer unit. By distribution into F+1 distribution cycles and verification of these data under the Byzantine algorithm, a fault-containing computer unit can hereby be recognized and deactivated, whereby the unaffected computer units continue to operate with valid data. 
     Each computer unit contains, for this purpose, one data storage DS 1  to DS(3F+1). To make the basic problematic which is the base of the invention more clearly understood, the circuitry and procedures in such fault tolerant computers, on the basis of FIGS. 5,  5   a ,  5   b  and  5   c  of this application, will be briefly described for F=1, for example. 
     FIG. 5 of this application shows how, via process signal lines  1 ,  2 ,  3 ,  4 ,  5 , process signals are passed to each computer unit RE 1 , RE 2 , RE 3 , RE 4 . Further data lines  6 ,  7 ,  8 ,  9 ,  10 ,  11  connect each computer unit with respectively one other computer unit. Each of these data lines  6 - 11  is comprised in detail of bi-directional connections for data and for deactivating signals and providing of clock pulse signals. The lines  1  to  11  shown in FIG. 5 are to be found in corresponding manner in the FIGS. 5 a ,  5   b  and  5   c , but without reference numerals. 
     Each one of the four computer units RE 1  to RE 4  has a process interface PSS and a monitoring logic ÜL, as well as an application specific processor AP. The data storages DS 1  to DS 4  are part of the monitoring logic ÜL and serve for storing of in-read process data. 
     The original data produced in the computer unit or, respectively, data d 1  to d 4  in-read by a process interface PSS are initially taken up in the respectively associated data storages DS 1  to DS 4 , in accordance with FIG. 5 a.    
     Subsequently, each computer unit transfers, in a first data distribution cycle in accordance with FIG. 5 b , its original data d 1  to d 4  to each other computer unit, into the associated data storage. At the conclusion of this distribution cycle, thus, each data storage contains, in accordance with FIG. 5 a , the in-read, inherent data d 1 ; d 2 ; d 3 ; d 4 , as well as the d 1 /RE 1 ; d 2 /RE 2 ; d 3 /RE 3 ; d 4 /RE 4  identified data, respectively, of the other computer units. 
     In a second data distribution cycle in accordance with FIG. 5 c , each computer unit then transfers all data obtained according to FIG. 5 b  into the data storages of those two computer units which did not already obtain data in the original condition in accordance with FIG. 5 a . Thus, at the conclusion of this distribution cycle, each data storage DS 1 , DS 2 , DS 3  and DS 4  contains its own or inherent data in accordance with FIG. 5 a  as well as, respectively, three blocks of data DB 1 , DB 2  and DB 3 , whereby the original data di are contained in a transferred block of data of the three other computer units, respectively, from another one of the three computer units REi. 
     The evaluation is then carried out in each computer unit respectively through a first comparison of the three data within each block of data for bitwise identity, and in a second comparison of the blocks of data DB 1  to DB 3  among one another, as well as with the respective original data in accordance with FIG. 5 a , for identity, whereby congruent (i.e., bit-identical) and quasi-congruent identity (i.e., identity within a tolerance range) can be differentiated. When through the subsequent evaluation of the results of comparison, by means of the known Byzantine algorithm, a fault-containing computer unit is identified, the computer unit then produces and transfers a deactivating signal to the computer unit identified as being fault-containing. When this computer unit receives from all three other computer units a deactivating signal, this computer unit is deactivated. 
     Known computer units or assemblies formed therefrom in accordance with German Patent No. 44 01 168 C2 have, however, the disadvantage that due to the differing contents of the data storages (compare FIG. 5 c  of this application), as well as the distribution and the comparison of the data on a logical plane or data stream at a level or plane above the individual data, there is required for each computer unit an individual data evaluation, which leads thereto so that known computer units or, respectively, assemblies configured thereof operate rather slowly, since the transfer and evaluation of the sets of data or data sentences require a high computing effort. 
     OBJECT OF THE INVENTION 
     One possible object of the present invention may be to provide a fault tolerant assembly of individual logic units or, respectively, computer units, these units per se, as well as a method of operating the assembly, being described above in this application, and which, respectively, operate essentially faster and essentially more reliably. 
     SUMMARY OF THE INVENTION 
     One possible embodiment of the present invention preferably teaches that this possible object can be accomplished with a logic unit of the type mentioned above in this application which is characterized thereby in that the registers are coupled with—each connected with one output—the inputs and outputs, and that each register is capable of being in-read and out-read, independently of the position of the logic unit within the assembly, by means of a position-invariant relative identification. 
     Furthermore, at least one possible embodiment of the present invention preferably teaches a computer unit with such a logic unit, as well as teaching a fault tolerant assembly of at least 3F+1 identically configured ones of such logic units or, respectively, computer units, whereby the inputs and outputs of the logic units or, respectively, computer units, are connected with one another, such that corresponding registers of various logic units or, respectively, computer units comprise data of like relative identification of the origin and of the transmitting computer unit. 
     Finally, at least one possible embodiment of the present invention preferably teaches a method of operating an assembly in accordance with the invention with at least 3F+1 logic units or computer units according to the invention, wherein F is the amount of faults that can be tolerated simultaneously-as-to-time, with F+1 data distributing cycles, whereby in-read data during in-reading and during distribution are identified with a relative identification, whereby the relative identification of the data in corresponding registers and various logic units or, respectively, computer units, is essentially identical. 
     Throughout this application, the letter or numeral i may designate the origin of data d, that is, in relative identification, the computer unit into which the data were originally in-read, while the letter or numeral j may designate that computer unit RE from which these data were transferred. 
     Throughout this application, the term “pertaining” may mean “corresponding.” 
     The relative identification may allow, in an essentially advantageous manner, the combining of identical computer units or logic units in an assembly. This makes it possible to operate computer units or logic units of an assembly at any desired position within the assembly, without it being necessary that adaptations be made. Furthermore, at least one possible embodiment of the present invention may allow the data distribution and the required data comparison exclusively by way of hardware and not by means of software, such that a fault tolerant assembly, in contrast with known assemblies, can be operated substantially faster and more reliably. 
     Preferably each computer unit comprises an identical logic unit associated with it. For the special case of F=1, each logic unit may have respectively 10 hardware shift registers, three inputs, which can be connected for in-reading of data sets or data sentences via first switch-over devices, with nine of such registers, as well as a further input which serves for in-reading of the original process data. Furthermore, each logic unit may have three outputs which are connectable, via respectively a second switch-over device, with all registers. Thereby each output of each logic unit is connected, respectively, to an input of such other logic unit, in such a manner that the data which are read-in into the first register of each logic unit are transferred by a first data distribution cycle into a register of each other logic unit. In a subsequent, second, data distribution cycle, data obtained during the first cycle from all other computer units are transferred from each register set into the other two respective register sets, which in the prior cycle were not senders of the specific data. Thereby the characterization of data and of the logic units is done by relative identification and cyclic modulo 4 check. The data may be distributed in such a way that these same registers of all register sets respectively have the same relative origin and respectively from a register set were transferred with essentially the same relative identification. 
     In at least one possible embodiment of the present invention, it is preferred that each logic unit has a plurality of deactivating lines, by means of which deactivating signals can be passed to further logic units or, respectively, deactivating signals can be received by further logic units, in the event that a fault has been recognized. Upon a completed deactivation, a re-activation of a logic unit, which may be particularly preferred, can be initiated. During re-activation, as well as during the initial activation of each logic unit, the logic units may be synchronized with the aid of cyclic data communication. 
     Essentially advantageously on the basis of a deactivating status, it may be decided whether data of a further unit are also to be excluded from data distribution and data evaluation or whether they are to be included. 
     The above-discussed embodiments of the present invention will be described further hereinbelow with reference to the accompanying figures. When the word “invention” is used in this specification, the word “invention” includes “inventions”, that is, the plural of “invention”. By stating “invention”, Applicant does not in any way admit that the present application does not include more than one patentably and non-obviously distinct invention, and Applicant maintains that this application may include more than one patentably and non-obviously distinct invention. Applicant hereby asserts that the disclosure of this application may include more than one invention, and that these inventions may be patentable and non-obvious one with respect to the other. 
     Further details, features and advantages of the invention can be found in the following description of a preferred embodiment on the basis of the drawings. 
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS 
     The present invention is explained in greater detail below with reference to the embodiments which are illustrated in the accompanying drawings. 
     FIG. 1 is an example of a circuit arrangement of a computer unit in accordance with the invention; 
     FIG. 2 is a logic unit (BSL) with components for data distribution in accordance with the invention; 
     FIG. 3 is an assembly in accordance with the invention of 3F+1 logic units in accordance with the invention, whereby F=1; 
     FIG. 4 is a logic unit in accordance with the invention with components for data comparison and a microprocessor; 
     FIGS. 5 and 5 a ,  5   b , and  5   c  show the circuitry and procedure of in-reading and distribution of data in a known fault tolerant assembly of computer units; and 
     FIGS. 6 and 6 a ,  6   b , and  6   c  show the circuitry as well as the course of in-reading and distributing of data in accordance with a fault tolerant assembly in accordance with the invention. 
    
    
     DESCRIPTION OF THE PREFERRED EMBODIMENT 
     FIG. 1 shows the layout in principle of a computer unit RE. A fault tolerant assembly in accordance with the invention is comprised of 3F+1 of these computer units. 
     A computer unit is comprised essentially of a logic unit BSL, which, via a suitable bus B 1 , is connected with a microprocessor MP, and which, via another bus B 2 , serves in the provision of a process data interface, with the process data, particularly the processing input-/output signals. Via a connecting logic between bus B 1  and bus B 2 , the microprocessor MP also access to the process data, whereby the access to the process data is controlled by the logic units BSL, particularly by means of a release signal, so as to ensure the necessary synchronized procedure of the logic units BSL. The microprocessor MP serves to carry out programs for control of the process data interface (directly and/or via the logic unit BSL), as well as to carry out application-specific programs. Furthermore, the microprocessor MP can be connected via bus B 1  and dual-ported RAMs with additional application-specific processors. 
     To process a plurality of input data in an essentially synchronous manner, each logic unit BSL has a multiplex function MX, which sequentially switches through the input data to the process data interface (bus B 2 ). Also, the multiplex function MX serves for the selection of an open circuit channel L for maintaining the cyclic course, in the event that as to time no process data are at hand, such that the logic unit BSL operates independently of events and essentially absolutely deterministically. The pertaining open circuit channel L can also serve to synchronize various computer applications with one another, if this is required. An essentially particularly advantageous embodiment of the present invention may be the selection of the pertaining input unit which is realized therein that in each cycle of data (n) the demand signals at hand of the input channels are also distributed and through a majority decision there is selected the channel which is to be processed in the data cycle (n+1). 
     In at least one possible embodiment of the present invention, it is preferred that synchronization of the logic units BSL is done via the data transfer between the logic units BSL. 
     In at least one possible embodiment of the present invention, there may be a bus, data interface, or device or arrangement for transmitting, receiving, sending, calculating, analyzing, or comparing data, which bus, data interface, or device may be represented by reference numeral  40 . In FIG. 1, the bus, data interface, or device or arrangement  40  is shown to be associated with, corresponding to, linking, or connecting the dual-ported RAM  38  and the additional application processor  39 . 
     Finally, it is also possible to return, with the aid of combined input-/output units, those data which were for output transferred to these, however, only were sent from the combined input-/output unit as process output signal to the exterior, during which the output switch AS was closed, via loop-back lines to all like input units (n+1, n+2, etc.), and with the aid of a comparator to compare those data with data transferred to the output. The pertaining result of comparison is distributed and verified as component of the input data or return-read output data in accordance with the Byzantine algorithm. In this manner it is possible to examine the output path of the computer units RE inclusive of the combined input-/output units in accordance with the Byzantine algorithm for fault-free functioning. For this purpose, the output units of the combined input-/output units are synchronized by the logic unit BSL via a corresponding signal. Furthermore, the output units  0  to n can be synchronized in the same manner. 
     In this representation a further essentially particularly advantageous embodiment of the present invention is shown, which resides therein in that the logic unit BSL is utilizable in flexible manner and application-independent, since it is respectively connected between the process data interface (bus B 2 ) and the application processor. The application, accordingly, obtains its data either directly from the process data interface or, upon verification by means of the Byzantine algorithm, together with status information via the logic unit BSL. 
     FIG. 2 shows the component which serves for data distribution of a logic unit BSL, as well as an associated set of shift registers, comprised of shift registers SR 1 -SR 10 , in detail. Furthermore, additional registers SR 1   a , SR 2   a , SR 6   a  and SR 10   a  are provided, which are connected with, respectively, the first, second, sixth, and tenth register SR 1 , SR 2 , SR 6 , SR 10 , as well as with a multiplex control MX. These additional registers SR 1   a , SR 2   a , SR 6   a  and SR 10   a  contain the respectively selected multiplex channel identification MKI+i and serve, together with the multiplex control MX for pre-selection of the respectively next input channel, which pre-selection is coordinated between the logic units BSL, which then in the next data cycle over each multiplexer MX is connected in the manner of a through-line to the pertaining logic unit BSL. 
     The shift registers SR 1 +SR 1   a , SR 2 , SR 6  and SR 10  are re-coupled during the out-reading course (not shown), such that on completion of the out-reading course again the original data in the respective registers are present. 
     Furthermore, there are provided additional switches Z 1  to Z 3  which are respectively connected into the input data lines + 1 , + 2 , + 3  of the set of registers. These additional switches may serve to generate a complete data set or data sentence in the event that one logic unit is deactivated. In this case the additional switch in the input data line leading to the deactivated logic, in contrast to the shown position  1 , is transferred to position  2 , such that the read-out data are passed from the registers and over to the switch S 1 , S 2  or S 3  associated with the deactivated logic unit, and passed data are in-read again, to store valid data again in the pertaining shift registers SRi. 
     The condition in consideration to the positions of the switches S 1  to S 3 , as well as the inputs identified by numerals  1  and  2  of the shift registers, are explained or shown in FIG.  3 . 
     FIG. 3 shows the connection of the components serving for data distribution of the logic unit BSL (compare FIG. 2) of four computer units RE 1 , RE 2 , RE 3 , RE 4  in an assembly in accordance with at least one possible embodiment of the present invention. The additional registers SRia shown in FIG. 2 are not included in FIG. 3 since they may not be necessary for the description of the data distribution between the computer units (RE 1  to RE 4 ). 
     The data distribution cycles are realized, in accordance with at least one possible embodiment of the present invention, by the circuitry shown in FIG. 3 of the individual registers, in conjunction with an operational control and a relative identification of the shown logic units BSL of the four computer units RE 1  to RE 4 , or Modulo 4 check. 
     The exchange of data between the logic units of the computer units (RE 1  to RE 4 ) may be carried out in two data distribution cycles. The numerals  1  and  2  at the inputs of the shift registers SR 1  to SR 10  indicate in which of the two distribution cycles, over the pertaining input, data are read in. The first to third switches S 1 , S 2  and S 3  in each logic unit BSL have respectively three switch positions  1 ,  2 , and  3 . The shown switch position  1  is being assumed during the first distribution cycle, the switch position  2  during the second distribution cycle for respectively a first data set or data sentence or word, and the switch position  3  during the second distribution cycle for respectively a second data set or data sentence. The processing course is in detail as follows: 
     The computer units RE 1  to RE 4  or, respectively, their shown logic units, are associated with one another in a cyclically increasing manner of checking or counting, or Modulo 4 check, whereby a computer unit which is immediately to the right of another computer unit and which has, in contrast, the relative address + 1 , and the computer unit arranged thereto to the right, which has the relative address + 2 , and so forth. 
     The data which are to be processed by the assembly and, in respect of being fault-free, are to be examined, are initially passed to each logic unit via their pertaining process data interface, namely, the bus B 2 , and are read into the respective first shift register SR 1  of the respective register set. 
     With a first data distribution cycle, all data d+ 0  then are transferred from the first registers SR 1  via the respective switch S 1 , in switch position  1 , into the tenth register SR 10  of the neighboring register set with relative address + 1 . 
     Simultaneously, into the respectively first registers SR 1  of the four units data in-read are transferred, via each second switch S 2 , in switch position  1 , into the sixth register SR 6  of the next but one register set, with relative address + 2 , and via each third switch S 3 , in switch position  1 , into the second register SR 2  of the to the left adjacent register set, with the relative address + 3 . At the conclusion of this first data distribution cycle, thus, each register set contains in the respective first register SR 1  the data passed to it initially, as well as, furthermore, in the registers SR 2 , SR 6  and SR 10 , the original data from the three other register sets, which were passed respectively via this logic unit. 
     The corresponding data carry the designation d+i/RE+j. The numeral i hereby designates the origin of the data d, that is, in relative identification, the computer unit into which the data were originally in-read, while the numeral j designates that computer unit RE from which these data were transferred. The data of all second registers SR 2  stem from, accordingly, in ascending counting manner, respectively neighbor, and are positioned to the right of the register set with the relative identification + 1 , and are also passed via this. 
     The additional registers SR 2   a +i (not shown in FIG. 3) are to be considered in the first distributing cycle as extensions of the registers SR 2 +i; their contents are distributed as described above together with the contents of the registers SR 2 +i. These additional registers are inactive in the second distribution cycle. 
     On conclusion of the first distribution cycle, a first part of the second data distribution cycle commences, upon moving the first to third switches S 1  to S 3  into the position  2 . 
     The data from the sixth registers SR 6  are now transferred via the first switches S 1  into the register set with the relative address + 1 , and are firstly transferred from there into the seventh register SR 7  from where they then, during the second part of the second distribution cycle, are moved, respectively, into the fifth register SR 4 . Furthermore, the contents of the tenth register SR 10  are loaded, via the second switches S 2 , into the register set with relative address of + 2 , and there are initially loaded into the respective third register SR 3 , from where they then, during the second part of the second distribution cycle, respectively are moved into the ninth register SR 9 . Finally, the second registers SR 2 , via the third switches S 3 , are loaded into the register set with the relative address + 3  and there initially are loaded into the respectively eighth register SR 8 , from where they then, during the second part of the second distribution cycle, respectively, are moved into the fifth register SR 5 . 
     This is the conclusion of the first part of the second data distribution cycle. The switches S 1  to S 3  are now brought to the position  3 , such that the second part of the second data distribution cycle can commence. 
     Via the first switches S 1 , thereby, the contents of the tenth registers SR 10  of each register set are transferred into the register set with the relative address + 1 , and are there stored in the seventh register SR 7 . Via the second switches S 2 , the contents of the second registers SR 2  of each register set are transferred into that one, or the corresponding register, with the relative address + 2 , and there are stored in the third register SR 3 . Finally, via the third switches SR 3 , the contents of the sixth registers SR 6  of each register set are transferred into those with the relative address + 3 , and are there transferred into the eighth register SR 8 . 
     In each transfer of a datum or singular unit of data, the datum&#39;s designation changes in consideration of its origin d, as well as the computer unit RE from which it was transferred, due to the corresponding relative identification of the computer units. From this, on conclusion of the second data distribution cycle, results the register occupancy shown in FIGS. 2 and 3, which is the same in all computer units RE 1  to RE 4 . 
     FIG. 6 shows an assembly of four computer units RE 1 , RE 2 , RE 3 , RE 4 , each having a logic unit BSL. These computer units are connected, as are those shown in FIG. 5, with process signal lines  1  to  5  for input and output of process data. The data lines  6  to  11  form, as in FIG. 5, bi-directional connections between the computer units RE 1  to RE 4  for the transmission of data and deactivating signals. Lines  1  to  11  shown in FIG. 6 can be found again in corresponding manner in FIGS. 6 a ,  6   b , and  6   c , with the identifications by reference numerals being described hereinbelow. 
     Each computer unit RE 1  to RE 4  has a logic unit BSL which is connected to inputs identified by the relative identification + 1 , + 2 , + 3  and to outputs, via data lines  6  to  11 . In the computer units shown in FIG. 6, the logic units BSL are respectively connected to a microprocessor MP, as was explained above with reference to FIG.  1 . Furthermore, the multiplex function realized in the logic units BSL is shown schematically by block MX. Each logic unit BSL has a register set RS 1 , RS 2 , RS 3 , or RS 4  and, in accordance with FIG. 2, includes the registers SR 1  to SR 10 . 
     The individual steps of the data distribution, in accordance with at least one possible embodiment of the present invention and as just described, are shown in FIGS. 6 a  to  6   c . When comparing the representation in FIG. 6 c  and the representation of known computers according to FIG. 5 c , it may be essentially clear that the contents of all four register sets RS 1  to RS 4 , on conclusion of the data distribution cycle, are the same (FIG. 6 c ), whereby, however, the data storages DS 1  to DS 4  (FIG. 5 c ) have differing contents, every time fault-free data being a precondition. Thus, this is done without an individual data evaluation in the computer or, respectively, the logic unit in accordance with at least one possible embodiment of the present invention, which is a requirement in known computer units. This may provides the possible advantage that in contrast to the architecture of a known fault tolerant assembly, the assembly in accordance with at least one possible embodiment of the present invention can be realized using essentially identical computer units or, respectively, logic units, essentially independently of their physical position of use in the computer assembly. 
     The circuitry shown in FIG. 3 of the computer units is to be provided, along the just-described data lines, also for deactivating lines (not shown). In FIG. 1 these lines are shown as input and output lines of the logic unit BSL. 
     FIG. 4 shows a principle of the comparison and the evaluation of the in-read data as well as data blocks DB 1  to DB 3 . For the determination of identities, a plurality of comparators K 1 , K 2 , K 3 , K 4 , K 5 , K 6 , K 7 , K 8 , K 9 , K 10 , K 11 , K 12 , K 13  is provided. These are arranged in such a manner that for a data block DBi there is created an inner comparator ring, comprised of 3 comparators K 3 , K 4 , K 5  or, respectively, K 7 , K 8 , K 9  or, respectively, K 11 , K 12 , K 13 , as well as an outer comparator ring, comprised of the four comparators K 1 , K 2 , K 6  and K 10 , which outer comparator ring combines the 3 inner comparator rings and the register SR 1  with one another. 
     The contents of the first and tenth registers SR 1 , SR 10  are compared with a first comparator K 1 . The contents of the first and second registers SR 1 , SR 2  with a second comparator K 2 . The contents of the second and third registers SR 2 , SR 3  are compared with a third comparator K 3 . The contents of the third and fourth registers SR 3 , SR 4  are compared with a fourth comparator K 4 , as well as with a fifth comparator K 5 . The contents of the second and fourth registers SR 2 , SR 4  are compared with a fifth comparator K 5 . 
     In corresponding manner, a sixth comparator K 6  serves to compare the contents of the fourth register SR 4  with the fifth register SR 5 . A seventh comparator K 7  compares the contents of the fifth and sixth registers SR 5 , SR 6 . An eighth comparator K 8  compares the contents of the sixth and seventh registers SR 6 , SR 7 . A ninth comparator K 9  compares the contents of the fifth and seventh registers SR 5 , SR 7 . 
     Finally, a tenth comparator K 10  serves to compare the contents of the seventh register SR 7  with the eighth register SR 8 . An eleventh comparator K 11  compares the contents of the eighths and ninth registers SR 8 , SR 9 . A twelfth comparator K 12  compares the contents of the ninth and tenth registers SR 9 , SR 10 . A thirteenth comparator K 13  compares the contents of the eighth and tenths registers SR 8 , SR 10 . 
     The outputs of the comparators K 1  to K 13  are connected with an evaluation logic BL which can initiate, in the event of a fault, on the one hand, deactivating signals and which, on the other hand, sends the identification of the registers with fault-free data to the microprocessor MP. For out-reading of the register contents all registers are connected to the data bus (not shown) of the microprocessor MP. 
     In at least one possible embodiment of the present invention, the comparison of data may be done in two logical steps, whereby in a first comparison, with the aid of the inner comparator rings K 3 , K 4 , X 5  or, respectively or receptively, K 7 , K 8 , K 9  or, respectively, K 11 , K 12 , K 13 , the data d+i within a block of data DBi, which with respect to origin arise from the same logic unit or, respectively, computer unit RE+i, but which were transmitted via different paths, are examined for bitwise identity. If no bitwise identity is found in one of these comparisons, a fault is present, and, in accordance with the Byzantine algorithm, there is initiated the generation of a deactivating signal to the fault-carrying logic unit or, respectively, computer unit. When a logic unit or, respectively, computer unit, receives three deactivating signals, it is isolated from the computer assembly. When all data d+i within a pertaining block of data DBi are in bitwise manner identical, in a second comparison, with the aid of the outer comparator ring K 1 , K 2 , K 6 , K 10 , the contents of the blocks of data, as well as the contents of the register SR 1 , are compared with one another, whereby between congruent (all register contents are identical in bitwise manner) and quasi-congruent (bitwise identical in the first comparisons, but differing among each other) data can be differentiated. In the case of congruent data, no fault is present and no deactivation signal is generated. In the case of quasi-congruent data, the evaluation of such data is subject to the application which, as required, can also generate, as required, initiation of a deactivating signal. 
     In the left hand portion of FIG. 4 are shown again additional registers SR 1   a , SR 2   a , SR 6   a  and SR 10   a , the contents of which are also compared with one another by way of comparators ZK 1  to ZK 4 . The outputs of the comparators are connected to a selection logic AL, with which is done a pre-selection of the multiplex channel which needs to be switched, in the manner of a through-line, as in the next following description. 
     Since, in the fault tolerant assembly in accordance with at least one possible embodiment of the present invention, in contrast with the known computer assembly, the data distribution and data comparison for bitwise identity are exclusively realized by hardware, as well as on the lowest level of logic—namely, are carried out in individual process data units—the assembly of at least one possible embodiment of the present invention is essentially faster and more reliable. The throughput of data is essentially better, the reaction times are essentially shorter, and the logic units or, respectively, computer units, are operating with essentially absolute synchronization and deterministically or in a deterministic manner. 
     In other words, FIG. 1 shows the layout in principle of a computer unit RE, identified by reference numeral  20 . 
     With reference to FIG. 3, a fault tolerant assembly in accordance with the invention is comprised of 3F+1 of these computer units, for example, for f=1, four units  20   a ,  20   b ,  20   c , and  20   d.    
     A computer unit  20  (FIG. 1) is comprised essentially of a logic unit BSL, reference numeral  30 , which via a suitable bus B 1 , reference numeral  31 , is connected with a microprocessor MP, reference numeral  32 , and via another bus B 2 , reference numeral  33 , which serves as process data interface for the process data, particularly the processing or process input signals  34  and at least one of process output signals  63   a ,  63 ,b,  63   c , and  63   n.    
     Via a connecting logic  36  between bus B 1 , reference numeral  31 , and B 2 , reference numeral  33 , the microprocessor MP, reference numeral  32 , also has access to all of the process data, whereby the access to the process data is controlled by the logic units BSL, reference numeral  30   a  to  30   d , by means of a release signal  37 , so as to ensure the necessary synchronized procedure of the logic units  30   a  to  30   d . Deactivating signals are moved by line  54  and data flow is also indicated by line  53 . 
     The microprocessor MP, reference numeral  32 , may serve to carry out programs for control of the process data interface  31  (directly and/or via the logic unit BSL,  30 ), as well as to carry out application-specific programs. 
     Furthermore, the microprocessor  32  can be connected via bus B 1 , reference numeral  31 , and dual-ported RAMs, one being shown in FIG. 1, reference numeral  38 , with additional application specific processors, such as  39 . 
     To process a plurality of input data  34  in synchronous manner, each logic unit BSL  30   a  to  30   d  has a multiplex function MX, reference numeral  41 , which switches through, sequentially, the input data  34  to the process data interface (bus B 2 ), reference numeral  33 . 
     Also, the multiplex function  41  serves for the selection of an open circuit channel L, reference numeral  42 , for maintaining the cyclic course or path, in the event that as to time no process data are at hand, such that the logic unit BSL,  30 , operates essentially independently of events and essentially absolutely deterministically. 
     The pertaining open circuit channel  42  can also serve to synchronize various computer applications with one another, if this is required. 
     A particularly advantageous embodiment of the invention is the selection of the pertaining input unit  43   a  to  43   n , which is realized therein that in each cycle of data (n) the demand signals at hand of at least one of the input channels  43 , which may be represented by reference numerals  43   a  and  43   n ,  43   a , and  43   n , are also distributed and through a majority decision there is selected the channel which is to be processed in the data cycle (n+1). 
     It is preferred that synchronization of the logic units  30   a  to  30   d  is done via the data transfer between the logic units  30   a  to  30   d.    
     Finally, it is also possible to return, with the aid of combined input/output units  44   a  to  44   n , those data which were for output transferred to these, however, only were sent from the pertaining combined input/output unit  44 , which may be represented by at least one of reference numerals  44   a  and  44   m , as process output signal  35 , which may be represented by at least one of reference numerals  35   a  and  35   m , to the exterior, during which the output switch AS, reference numeral  60 , which may be represented by at least one of reference numerals  60   a  or  60   m , was closed, via loop-back lines  45   a  to  45   n , or  45   a  to  45   m , to all like input units (n+1, n+2, etc.), reference numerals  43   a  to  43   n , and with the aid of comparators  62   a  to  62   m  to compare those data with data transferred to the output sides  47   a  to  47   m  of the combined input/output units  44   a  to  44   m.    
     The pertaining result of comparison is distributed and verified as component of the input data (return-read output data) in accordance with the Byzantine algorithm. 
     In this manner it is possible to examine the output path of the at least one of the computer units  20  and RE  20   a  to  20   d  (shown in FIG. 3) inclusive of the combined input/output units  44   a  to  44   m , in accordance with the Byzantine algorithm for fault-free functioning. 
     For this purpose, the output units or sides  47   a  to  47   m  of the combined input/output units  44   a  to  44   m  are synchronized by the logic unit BSL  30  via a corresponding signal. Furthermore, the output units  0  to n, at least one of reference numerals  48 ,  48   a ,  48   b , and  48   n , can be synchronized in the same manner. 
     In this representation a further essentially particularly advantageous embodiment of the invention may be shown or made clear, which resides therein in that the logic unit BSL  30  is utilizable in a flexible manner and is application-independent, since it is respectively connected between the process data interface (bus B 2 , reference numeral  33 ) and the application processor  39 . The application processor  39 , accordingly, obtains its data either directly from the process data interface  33  or, upon verification by means of the Byzantine algorithm, together with status information via the logic unit BSL  30 . 
     The multiplex function  41 , as is shown in FIG. 1, is connected to the input units  43   a  to  43   n , the open circuit channel  42 , and the input sides or portions  64   a  to  64   m  of the combined input/output units  44   a  to  44   m  by line  68 . Similarly the exit channel synchronization  70  of the logic unit  30  is connected by line  69  to the output portions or sides  47   a  to  47   m  of the input/output units  44   a  to  44   m  and, selectively, to the output units  48   a  to  48   n , or to the output units, which may be represented by at least one of reference numerals  48   a ,  48   b , and  48   n.    
     Internal signal distribution is indicated by reference numeral  71 . 
     FIG. 2 shows the component which serves for data distribution of a logic unit BSL  30 , as well as an associated set of shift registers, comprised of shift registers SR 1 -SR 10 , reference numerals  49   a  to  49   j —that is, reference numerals  49   a ,  49   b ,  49   c ,  49   d ,  49   e ,  49   f ,  49   g ,  49   h ,  49   i , and  49   j —in detail. 
     Furthermore, additional registers SR 1   a , SR 2   a , SR 6   a  and SR 10   a , reference numerals  50   a ,  50   b ,  50   c , and  50   d , are provided which are connected with the first,  49   a , second,  49   b , sixth,  49   f , and, respectively, tenth register,  49   j  (SR 1 , SR 2 , SR 6 , SR 10 ), as well as with a multiplex control  41 . These additional registers  50   a  to  50   d  contain the respectively selected multiplex channel identification MKI+i and serve, together with the multiplex control  41 , for pre-selection of the respectively next input channel, which is coordinated between the logic units BSL  30   a ,  30   b ,  30   c , and  30   d , and which then in the next data cycle over each multiplexer  41  is connected in the manner of a through-line to the pertaining logic unit BSL  30 . 
     The shift registers SR 1 +SR 1   a , SR 2 , SR 6  and SR 10 ,  49   a + 50   a ,  49   b ,  49   f ,  49   j  are re-coupled during the out-reading course (not shown), such that on completion of the out-reading course again the original data in the respective registers are present. 
     Furthermore, there are provided additional switches Z 1 , Z 2 , and Z 3 , reference numerals  51   a ,  51   b , and  51   c , which are respectively connected into the input data lines  65   a ,  65   b ,  65   c  (+ 1 , + 2 , + 3 ) of the set of registers  49   a  to  49   j . These additional switches  51   a  to  51   c  serve to generate a complete data set, or data sentence or word, in the event that one logic unit  30  is deactivated. In this case the additional switch  51 , which may be represented by at least one of reference numerals  51   a ,  51   b , and  51   c , in the input data line  65 , which may be represented by at least one of reference numerals  65   a ,  65   b , and  65   c , leading to the deactivated logic unit  30 , in contrast to the shown position  1 , is transferred to position  2 , such that the read-out data is passed from the registers  49   a  and over to the switch  52   a ,  52   b , or  52   c  (S 1 , S 2  or S 3 ) associated with the deactivated logic unit  30 , and passed data are in-read again, so as to store valid data again in the pertaining shift registers SRi. The switches  52   a  to  52   c  are connected to output data lines  66   a ,  66   b , and  66   c  which, in turn, are connected to the additional switches  51   a  to  51   c  in corresponding manner. 
     The condition in consideration to the positions of the switches S 1  to S 3 ,  52   a  to  52   c , as well as the inputs identified by numerals  1  and  2  of the shift registers  49   a  to  49   j , are explained with FIG.  3 . 
     FIG. 3 shows a connection of the components serving for data distribution of the logic unit  30 , BSL (compare FIG. 2, in which the logic unit  30  is shown), of four computer units  20   a ,  20   b ,  20   c , and  20   d  (RE 1 , RE 2 , RE 3 , RE 4 ) in an assembly in accordance with the invention. The additional registers SRia ( 50   a ,  50   b ,  50   c , and  50   d ), shown in FIG. 2, are not included in FIG. 3 since they are not necessary for the description of the data distribution between the computer units  20   a  to  20   d  (RE 1  to RE 4 ). 
     The data distribution cycles are realized in accordance with the invention by the circuitry shown in FIG. 3 of the individual registers  49   a  to  49   j , in conjunction with an operational control and a relative identification of the shown logic units of the four computer units  20   a  to  20   d  (RE 1  to RE 4 ) by a checksum or modulo 4 check. 
     The exchange of data between the logic units of the computer units  20   a  to  20   d  (RE 1  to RE 4 ) is carried out in two data distribution cycles. The numerals  1  and  2  at the inputs of the shift registers  49   a  to  49   j  (SR 1  to SR 10 ) indicate in which of the two distribution cycles, over the pertaining input, data are read-in. The first to third switches  52   a  to  52   c  (S 1 , S 2  and S 3 ) in each logic unit  30   a  to  30   d  have respectively three switch positions. The shown switch position  1  is assumed during the first distribution cycle; the switch position  2  is assumed during the second distribution cycle for respectively a first data set, data sentence or data word; and the switch position  3  is assumed during the second distribution cycle for respectively a second data set, data sentence or data word. The processing course is in detail as follows: 
     The computer units  20   a  to  20   d  (RE 1  to RE 4 ) or, respectively, their shown logic units ( 30   a  to  30   d ), are associated with one another in a cyclically increasing manner of checking or counting, checksum or modulo-4 check, whereby a computer unit  20 , which may be represented by at least one of reference numerals  20   a ,  20   b ,  20   c , and  20   d , which is essentially immediately to the right of another computer unit  20 , which may be represented by at least one of reference numerals  20   a ,  20   b ,  20   c , and  20   d , has, in contrast, the relative address + 1 , and the computer unit  20 , which may be represented by at least one of reference numerals  20   a ,  20   b ,  20   c , and  20   d , arranged to the right thereof has the relative address + 2 , and so forth. Thus, computer unit  20   b  has the relative address + 1  and computer unit  20   c  has the relative address + 2 . 
     The data which are to be processed by the assembly and examined in respect of being fault-free are initially passed to each logic unit  30   a  to  30   d  via their pertaining or corresponding process data interface, namely, the bus  33  (B 2 ) (shown in FIG.  1 ), and are read into the respectively first shift register  49   a  (SR 1 ) of the respective register set  49   a  to  49   j.    
     With a first data distribution cycle, then, all data d+ 0  are transferred from the first registers  49   a  (SR 1 ) via the respective switch  52   a  (S 1 ), in switch position  1 , into the tenth register  49   j  (SR 10 ) of the neighboring register set with relative address + 1 . 
     Simultaneously, into the respectively first registers  49   a  of the four computer units  20   a  to  20   d , data in-read are transferred, via each second switch S 2 , reference numeral  52   b , in switch position  1 , into the sixth register  49   f  (SR 6 ) of the next but one register set, with relative address + 2 , and via each third switch  52   c  (S 3 ), in switch position  1 , into the second register  49   b  (SR 2 ) of the adjacent register set to the left, with the relative address + 3 . At the conclusion of this first data distribution cycle, thus, each register set contains in the respectively first register  49   a  (SR 1 ) the data passed initially to it, as well as, furthermore, in the registers  49   b ,  49   f ,  49   j  (SR 2 , SR 6  and SR 10 ), the original data from the three other register sets, which were passed respectively via the pertaining logic unit  30 . 
     The corresponding data carry the designation d+i/RE+j. The numeral i designates the origin of the data d, that is, in relative identification, that computer unit  20  (shown in FIG. 1) into which the data were originally in-read, while the numeral j designates that computer unit  20  (RE) (shown in FIG.  1 ), which computer unit  20  may be represented by at least one of reference numerals  20   a ,  20   b ,  20   c , and  20   d , from which these data were transferred. The data of all second registers  49   b  (SR 2 ) stem from, accordingly, the respectively neighboring register set  49   a  to  49   j  with the relative identification + 1 , which register set is positioned to the right of the second registers  49   b  (SR 2 ), in ascending manner, and were also passed via this. 
     The additional register SR 2   a +i (not shown in FIG. 3) are to be considered in the first distributing cycle as extensions of the registers SR 2 +i, reference numeral  50   b  (shown in FIG.  2 ); their contents are distributed as described above, together with the contents of the registers SR 2 +i. These additional registers are inactive in the second distribution cycle. 
     On conclusion of the first distribution cycle, a first part of the second data distribution cycle commences upon moving the first to third switches  52   a  to  52   c  (S 1  to S 3 ) into the position  2 . 
     The data from the sixth registers  49   f  (SR 6 ) are now transferred via the first switches  52   a  (S 1 ) into the register set with the relative address + 1 , and are firstly transferred there into the seventh register  49   g  (SR 7 ), from where they, then, during the second part of the second distribution cycle, are moved, respectively, into the fifth register  49   e  (SR 5 ). Furthermore, the contents of the tenth register  49   j  (SR 10 ) are loaded via the second switches  52   b  (S 2 ) into the register set with relative address of + 2 , and there are initially loaded into the respective third register  49   c  (SR 3 ), from where they, then, during the second part of the second distribution cycle, respectively are moved into the ninth register  49   i  (SR 9 ). Finally, the contents of the second registers  49   b  (SR 2 ) are loaded via the third switches  52   c  (S 3 ) into the register set with the relative address + 3  and there initially are loaded into the respectively eighth register  49   h  (SR 8 ), from where they, then, during the second part of the second distribution cycle, respectively, are moved into the fifth register  49   e  (SR 5 ). 
     This is the conclusion of the first part of the second data distribution cycle. The switches  52   a  to  52   c  (S 1  to S 3 ), which are between the registers  49   a  to  49   j  and the additional registers  50   a  to  50   d  (shown in FIG. 2) and have output lines  66 , which output lines  66  may be represented by at least one of reference numerals  66   a ,  66   b , and  66   c , are now brought to the position  3 , such that the second part of the second data distribution cycle can commence. 
     Via the first switches  52   a  (S 1 ), the contents of the tenth registers  49   j  (SR 10 ) of each register set are thereby transferred into the register set with the relative address + 1 , and are there stored in the seventh register  49   g  (SR 7 ). Via the second switches  52   b  (S 2 ), the contents of the second registers  49   b  (SR 2 ) of each register set are transferred into the one with the relative address + 2 , and there are stored in the third register  49   c  (SR 3 ). Finally, via the third switches  52   c  (S 3 ), the contents of the sixth registers  49   f  (SR 6 ) of each register set are transmitted into those with the relative address + 3 , and are there transferred into the eighth register  49   h  (SR 8 ). 
     In each transfer of a datum, or a singular data or a singular piece or unit of data, the datum&#39;s designation changes in consideration of its origin d, as well as the computer unit  20  (RE), shown in FIG. 1, from which it was transferred, due to the corresponding relative identification of the computer units  20   a  to  20   d . From this, on conclusion of the second data distribution cycle, there results the register occupancy shown in FIGS. 2 and 3, which is the same in all computer units  20   a  to  20   d  (RE 1  to RE 4 ). 
     FIG. 5 of this application shows how, via process signal lines  1 ,  2 ,  3 ,  4 ,  5 , process signals are passed to each computer unit RE 1 , RE 2 , RE 3 , RE 4 . Further data lines  6 ,  7 ,  8 ,  9 ,  10 ,  11  connect each computer unit with respectively one other computer unit. Each of these data lines  6 - 11  is comprised in detail of bi-directional connections for data and for deactivating signals and providing of clock pulse signals. The lines  1  to  11  shown in FIG. 5 are to be found in corresponding manner in the FIGS. 5 a ,  5   b  and  5   c , but without reference numerals. 
     Each one of the four computer units RE 1  to RE 4  has a process interface PSS and a monitoring logic ÜL, as well as an application specific processor AP. The data storages DS 1  to DS 4  are part of the monitoring logic ÜL and serve for storing of in-read process data. 
     The original data produced in the computer unit or, respectively, data d 1  to d 4  in-read by a process interface PSS are initially taken up in the respectively associated data storages DS 1  to DS 4 , in accordance with FIG. 5 a.    
     Subsequently, each computer unit transfers, in a first data distribution cycle in accordance with FIG. 5 b , its original data d 1  to d 4  to each other computer unit, into the associated data storage. At the conclusion of this distribution cycle, thus, each data storage contains, in accordance with FIG. 5 a , the in-read, inherent data d 1 ; d 2 ; d 3 ; d 4 , as well as the d 1 /RE 1 ; d 2 /RE 2 ; d 3 /RE 3 ; d 4 /RE 4  identified data, respectively, of the other computer units. 
     In a second data distribution cycle in accordance with FIG. 5 c , each computer unit then transfers all data obtained according to FIG. 5 b  into the data storages of those two computer units which did not already obtain data in the original condition in accordance with FIG. 5 a . Thus, at the conclusion of this distribution cycle, each data storage DS 1 , DS 2 , DS 3  and DS 4  contains its own or inherent data in accordance with FIG. 5 a  as well as, respectively, three blocks of data DB 1 , DB 2  and DB 3 , whereby the original data di are contained in a transferred block of data of the three other computer units, respectively, from another one of the three computer units REi. 
     The evaluation is then carried out in each computer unit respectively through a first comparison of the three data within each block of data for bitwise identity, and in a second comparison of the blocks of data DB 1  to DB 3  among one another, as well as with the respective original data in accordance with FIG. 5 a , for identity, whereby congruent (i.e., bit-identical) and quasi-congruent identity (i.e., identity within a tolerance range) can be differentiated. When through the subsequent evaluation of the results of comparison, by means of the known Byzantine algorithm, a fault-containing computer unit is identified, the computer unit then produces and transfers a deactivating signal to the computer unit identified as being fault-containing. When this computer unit receives from all three other computer units a deactivating signal, this computer unit is deactivated. 
     FIG. 6 shows an assembly of four computer units  20   a ,  20   b ,  20   c , and  20   d  (RE 1 , RE 2 , RE 3 , RE 4 ), each having a logic unit  30   a ,  30   b ,  30   c , or  30   d  (BSL), at least one of which logic units  30   a ,  30   b ,  30   c , and  30   d  may be represented by reference numeral  30 . These computer units  20   a  to  20   d  are connected, as those shown in FIG. 5, with process signal lines  1 ,  2 ,  3 ,  4 , and  5  for input and output of process data. The data lines  6 ,  7 ,  8 ,  9 ,  10 , and  11  form, as in FIG. 5, bi-directional connections between the computer units  20   a  to  20   d  (RE 1  to RE 4 ) for the transmission of data and deactivating signals. The lines  1 ,  2 ,  3 ,  4 ,  5 ,  6 ,  7 ,  8 ,  9 ,  10 , and  11  shown in FIG. 6 can be found again in corresponding manner in FIGS. 6 a ,  6   b , and  6   c , with the identifications by reference numerals as described hereinbelow. 
     Each computer unit  20   a ,  20   b ,  20   c ,  20   d  (RE 1  to RE 4 ) has a logic unit BSL ( 30   a ,  30   b ,  30   c ,  30   d ) which are connected to inputs identified by the relative identification + 1 , + 2 , + 3  and to outputs, via data lines  6 ,  7 ,  8 ,  9 ,  10 ,  11 . In the computer units  20   a  to  20   d  shown in FIG. 6, the logic units  30   a  to  30   d  (BSL) are respectively connected to a microprocessor, which may be represented by at least one of reference numerals  32   a ,  32   b ,  32   c , and  32   d , as was explained above with reference to FIG.  1 . Furthermore, the multiplex function realized in the logic units  30   a  to  30   d  (BSL) is shown schematically by blocks  41   a ,  41   b ,  41   c , and  41   d  (MX). Each logic unit  30   a  to  30   d  (BSL) has a register set  52   a ,  52   b ,  52   c , and  52   d  (RS 1 , RS 2 , RS 3 , or RS 4 ) and, in accordance with FIG. 2, includes the registers  49   a  to  49   j  (SR 1  to SR 10 ). 
     The individual steps of the data distribution, in accordance with the invention and as just described, are shown in FIGS. 6 a  to  6   c . When comparing the representation in FIG. 6 c  and the representation of known computers according to FIG. 5 c , it may be essentially clear that the contents of all four register sets  52   a  to  52   d  (RS 1  to RS 4 ), on conclusion of the data distribution cycle, are essentially the same (FIG. 6 c ), whereby, however, the data storages DS 1  to DS 4  (FIG. 5 c ) have differing contents—every time fault-free data being a precondition. Thus, there is done without an individual data evaluation in the computer unit  20  or, respectively, the logic unit  30  in accordance with at least one possible embodiment of the present invention, which may be a requirement in known computer units. This may provide the advantage that in contrast to the architecture of a known fault tolerant assembly, the assembly in accordance with at least one possible embodiment of the present invention can be realized using identical computer units  20  or, respectively, logic units  30 , independently of their physical position of use in the computer assembly. 
     The circuitry shown in FIG. 3 of the computer units  20  is to be provided, along the just-described data lines, also for deactivating lines (not shown). In FIG. 1 these lines are shown as input line  34  and output lines  35   a  to  35   m  and  63   a ,  63   b , and  63   c  of the logic unit  30  (BSL). 
     FIG. 4 shows a principle of the comparison and the evaluation of the in-read data as well as data blocks  55   a ,  55   b , and  55   c  (DB 1  to DB 3 ). For the determination of identities, a plurality of comparators  46   a ,  46   b ,  46   c ,  46   d ,  46   e ,  46   f ,  46   g ,  46   h ,  46   i ,  46   j ,  46   k ,  46   l , and  46   m  are provided. These are arranged in such a manner that for a data block DBi ( 55 ) there is created an inner comparator ring, comprised of three comparators  46   c ,  46   d ,  46   e  (K 3 , K 4 , K 5 ) or, respectively,  46   g ,  46   h ,  46   i  (K 7 , K 8 , K 9 ) or, respectively,  46   k ,  46   l ,  46   m  (K 11 , K 12 , K 13 ), as well as an outer comparator ring, comprised of the four comparators  46   a ,  46   b ,  46   f ,  46   j  (K 1 , K 2 , K 6  and K 10 ), which outer comparator ring combines the three inner comparator rings and the register  49   a  (SR 1 ) with one another. 
     The contents of the first and tenth registers  49   a ,  49   j  (SR 1 , SR 10 ) are compared with a first comparator  46   a  (K 1 ). The contents of the first and second registers  49   a ,  49   b  (SR 1 , SR 2 ) are compared with a second comparator  46   b  (K 2 ). The contents of the second and third registers  49   b ,  49   c  (SR 2 , SR 3 ) are compared with a third comparator  46   c  (K 3 ). The contents of the third and fourth registers  49   c ,  49   d  (SR 3 , SR 4 ) are compared with a fourth comparator  46   d  (K 4 ). The contents of the second and fourth registers  49   b ,  49   d  (SR 2 , SR 4 ) are compared with a fifth comparator  46   e  (K 5 ). 
     In corresponding manner, a sixth comparator  46   f  (K 6 ) serves to compare the contents of the fourth register  49   d  (SR 4 ) with the fifth register  49   e  (SR 5 ). A seventh comparator  46   g  (K 7 ) compares the contents of the fifth and sixth registers  49   e ,  49   f  (SR 5 , SR 6 ). An eighth comparator  46   h  (K 8 ) compares the contents of the sixth and seventh registers  49   f ,  49   g  (SR 6 , SR 7 ). A ninth comparator  46   i  (K 9 ) compares the contents of the fifth and seventh registers  49   e ,  49   g  (SR 5 , SR 7 ). 
     Finally, a tenth comparator  46   j  (K 10 ) serves to compare the contents of the seventh register  49   g  (SR 7 ) with the eighth register  49   h  (SR 8 ). An eleventh comparator  46   k  (K 11 ) compares the contents of the eighths and ninth registers  49   h ,  49   i  (SR 8 , SR 9 ). A twelfth comparator  46   l  (K 12 ) compares the contents of the ninth and tenth registers  49   i ,  49   j  (SR 9 , SR 10 ). A thirteenth comparator  46   m  (K 13 ) compares the contents of the eighth and tenths registers  49   h ,  49   j  (SR 8 , SR 10 ). 
     The outputs of the comparators  46   a  to  46   m  (K 1  to K 13 ) are connected with an evaluation logic  56  (BL) which can initiate, in the event of a fault, on the one hand, deactivating signals  67   a ,  67   b , and  67   c  and which, on the other hand, sends the identification of the registers with fault-free data to the microprocessor  32 . For out-reading of the register contents, all registers are connected to the data bus (not shown) of the microprocessor  32 . 
     The comparison of data is done in two logical steps, whereby in a first comparison, with the aid of the inner comparator rings  46   c ,  46   d ,  46   e  (K 3 , K 4 , K 5 ) or, respectively,  46   g ,  46   h ,  46   i  (K 7 , K 8 , K 9 ) or, respectively,  46   k ,  46   l ,  46   m  (K 11 , K 12 , K 13 ), the data d+i within a block of data ( 55 ) DBi, which with respect to origin arise from the same logic unit  30 , shown in FIG. 1, or, respectively, computer unit  20  RE+i, shown in at least one of FIG.  1  and FIG. 3, but which were transmitted via different paths, are examined for bitwise identity. If in one of these comparisons no bitwise identity is found, a fault is present and, in accordance with the Byzantine algorithm, there is initiated the generation of a deactivating signal, one of  67   a  to  67   c , to the fault-carrying logic unit  30 , shown in FIG. 1, or, respectively, computer unit  20 , shown in FIG.  1 . When a logic unit  30  (shown in FIG. 1) or, respectively, computer unit  20  (shown in FIG. 1) receives three, or up to three, deactivating signals  67 , which deactivating signals may be represented by at least one of reference numerals  67   a ,  67   b , and  67   c , it is isolated from the computer assembly. When all data d+i within a pertaining or corresponding block of data ( 55 , which may be represented by at least one of reference numerals  55   a ,  55   b ,  55   c , and  55   d ) DBi are in bitwise manner identical, in a second comparison, with the aid of the outer comparator ring  46   a ,  46   b ,  46   f    46   j  (K 1 , K 2 , K 6 , K 10 ), the contents of the blocks of data ( 55 ), as well as the contents of the register  49   a  (SR 1 ), are compared with one another, whereby between congruent (all register contents are identical in bitwise manner) and quasi-congruent (bitwise identical in the first comparisons, but among each other differing) data can be differentiated. In the case of congruent data, no fault is present and no deactivation signal  67 , which may be represented by at least one of the reference numerals  67   a ,  67   b , and  67   c , is generated; in the case of quasi-congruent data, the evaluation of such data is subject to the application which, as required, can also generate, as required, initiation of a deactivating signal, one of  67   a  to  67   c.    
     In the left-hand portion of FIG. 4 are shown again additional registers  50   a ,  50   b ,  50   c ,  50   d  (SR 1   a , SR 2   a , SR 6   a  and SR 10   a ), the contents of which are also compared with one another by way of comparators  58   a ,  58   b ,  58   c , and  58   d  (ZK 1  to ZK 4 ). The outputs of the comparators  58   a  to  58   d  are connected to a selection logic  59  (AL), with which is done a pre-selection of the multiplex channel  41  which needs to be switched, in the manner of a through-line, as the next following description. 
     One feature of the invention resides broadly in a super computer comprising: memory apparatus for storing data; hardware for processing data; software for running said hardware, said computer further comprising: (a) a plurality of at least four logic units, hardware-connected to one another; (b) each logic unit having at least one register, into which data can be read, data can be stored, and data can be read from; apparatus for controlling flow of data between said logic units in substantially synchronous manner through flow of data between said logic units; output apparatus for reading data from said registers, operatively connected to each logic unit; input apparatus for reading data into said registers operatively connected to each logic unit; and interconnecting circuitry to operatively connect said output apparatus with said logic units, said interconnecting circuitry being configured as hardware connection to tolerate an amount of F faults in conformity with the Byzantine algorithm, for processing valid data and for generating a signal for deactivating a fault-containing logic unit. 
     Another feature of the invention resides broadly in a computer comprising: a plurality of at least four logic units, hardware-connected to one another; (b) each logic unit having at least one register, into which data can be read, data can be stored, and data can be read from; apparatus for controlling flow of data between said logic units in substantially synchronous manner through flow of data between said logic units; output apparatus for reading data from said registers, operatively connected to each logic unit; input apparatus for reading data into said registers operatively connected to each logic unit; and interconnecting circuitry to operatively connect said output apparatus with said logic units, said interconnecting circuitry being configured as hardware connection to tolerate an amount of F faults in conformity with the Byzantine algorithm. 
     Some examples of systems that measure operating parameters and learn therefrom and that may be used or adapted for use in at least one possible embodiment of the present invention may be found in the following U.S. patents: U.S. Pat. No. 5,770,934, issued to inventor Theile on Jun. 13, 1998; U.S. Pat. No. 5,191,272, issued to inventors Torii et al. on Mar. 2, 1993; U.S. Pat. No. 5,223,820, issued to inventors Sutterlin et al. on Jun. 29, 1993; and U.S. Pat. No. 4,655,188, issued to inventors Tomisawa et al. on Apr. 7, 1987. 
     Some examples of microprocessors that may be used or adapted for use in at least one possible embodiment of the present invention may be found in the following U.S. patents: U.S. Pat. No. 5,770,934, issued to inventor Theile on Jun. 23, 1998; U.S. Pat. No. 5,479,151, issued to inventors Lavelle et al. on Dec. 26, 1995; U.S. Pat. No. 5,453,736, issued to inventor Noren on Sep. 26, 1995; U.S. Pat. No. 5,437,174, issued to inventor Aydin on Aug. 1, 1995; U.S. Pat. No. 5,274,312, issued to inventor Gertsenkorn on Dec. 28, 1993; and U.S. Pat. No. 5,140,173, issued to inventors Chau et al. on Aug. 18, 1992. 
     Some examples of databuses or databus systems that may be used or adapted for use in at least one possible embodiment of the present invention may be found in the following U.S. patents: U.S. Pat. No. 6,008,546, issued to inventor Sage on Dec. 28, 1999; U.S. Pat. No. 5,978,193, issued to inventor Kaaden on Nov. 2, 1999; U.S. Pat. No. 5,815,732, issued to inventors Cooper et al. on Sep. 29, 1998; U.S. Pat. No. 5,507,001, issued to inventor Nishizawa on Apr. 9, 1996; and U.S. Pat. No. 5,402,423, issued to inventors Van Kersen et al. on Mar. 28, 1995. 
     The components disclosed in the various publications, disclosed or incorporated by reference herein, may be used with at least one possible embodiment of the present invention, and may be found in the following U.S. patents: U.S. Pat. No. 4,569,015 to Dolev et al.; U.S. Pat. No. 4,748,617 to Drewlo; U.S. Pat. No. 4,805,107 to Kieckhafer et al.; U.S. Pat. No. 4,816,989 to Finn et al.; U.S. Pat. No. 4,849,979 to Maccianti, et al.; U.S. Pat. No. 5,107,416 to Jippo et al.; U.S. Pat. No. 5,117,442 to Hall; U.S. Pat. No. 5,157,663 to Major et al.; U.S. Pat. No. 5,200.915 to Hayami et al.; U.S. Pat. No. 5,206,952 to Sundet et al.; U.S. Pat. No. 5,239,641 to Horst; U.S. Pat. No. 5,269,016 to Butler et al.; U.S. Pat. No. 5,271,013 to Gleeson; U.S. Pat. No. 5,325,517 to Baker et al.; U.S. Pat. No. 5,327,550 to Pribnow; U.S. Pat. No. 5,349,654 to Bond et al.; U.S. Pat. No. 5,353,436 to Horst; U.S. Pat. No. 5,355,528 to Rosska et al.; U.S. Pat. No. 5,455,932 to Major et al.; U.S. Pat. No. 5,557,623 to Discoll; U.S. Pat. No. 5,598,529 to Garay et al.; U.S. Pat. No. 5,600,784 to Bissett et al.; U.S. Pat. No. 5,630,046 to Loise; U.S. Pat. No. 5,768,493 to Kumar; U.S. Pat. No. 5,790,397 to Bissett et al.; U.S. Pat. No. 5,802,265 to Bressoud et al.; U.S. Pat. No. 5,822,512 to Goodrum et al.; U.S. Pat. No. 5,838,899 to Leavitt et al.; U.S. Pat. No. 5,848,286 to Schiffleger et al.; U.S. Pat. No. 5,903,717 to Wardrop; U.S. Pat. No. 5,923,512 to Brownlow et al.; U.S. Pat. No. 5,948,112 to Shimada et al.; U.S. Pat. No. 5,949,778 to Abu-Amara et al.; U.S. Pat. No. 5,956,474 to Bissett et al.; U.S. Pat. No. 5,968,185 to Bressoud et al.; U.S. Pat. No. 5,996,089 to Mann et al.; U.S. Pat. No. 6,018,810 to Olarig; U.S. Pat. No. 6,026,092 to Abu-Amara et al.; U.S. Pat. No. 6,032,267 to Fishler et al.; and U.S. Pat. No. 6,038,685 to Bissett et al. 
     The features disclosed in the various publications, disclosed or incorporated by reference herein, may be used in the embodiments of the present invention, as well as equivalents thereof. 
     The components disclosed in the various publications, disclosed or incorporated by reference herein, may be used in the embodiments of the present invention, as well as, equivalents thereof. 
     The appended drawings in their entirety, including all dimensions, proportions and/or shapes in at least one embodiment of the invention, are accurate and to scale and are hereby included by reference into this specification. 
     All, or substantially all, of the components and methods of the various embodiments may be used with at least one embodiment or all of the embodiments, if more than one embodiment is described herein. 
     All of the patents, patent applications and publications recited herein, and in the Declaration attached hereto, are hereby incorporated by reference as if set forth in their entirety herein. 
     The following patents, patent applications, or patent publications are hereby incorporated by reference as if set forth in their entirety herein as follows: DE 44 01 168 C 2, having inventor Gerhard Urban, filed on Jan. 17, 1994, issued on Jun. 27, 1996, and “The Byzantine Generals Problem”, written by Leslie Lamport, Robert Shostak and Marshall Pease, all of SRI International, and published in  ACM Transactions on Programming Languages and Systems  Vol. 4, No. 3, July 1982, pages 382-401. 
     The corresponding foreign patent publication applications, namely, Federal Republic of Germany Patent Application No. DE 199 21 179.5, filed on May 7, 1999, having inventor Dipl.-Ing. Volker Brinkmann, which inventor has address Brinkumer Strasse 28a, D-28844 Weyhe, Federal Republic of Germany, and having applicant DaimlerChrysler Aerospace AG, which applicant has address Willy-Messerchmitt-Strasse 1, D-85521 Ottobrunn, entitled “Logikeinheit nach byzantinen Algorithmus, Rechnereinheit mit solcher Logikeinheit, Verbund aus Logik-oder Rechnereinheiten und Verfahren zum Betrieben eines solchen Verbunds”, and DE-OS 199 21 179.5 and DE-PS 199 21 179.5, as well as their published equivalents, and other equivalents or corresponding applications, if any, in corresponding cases in the Federal Republic of Germany and elsewhere, and the references cited in any of the documents cited herein, are hereby incorporated by reference as if set forth in their entirety herein. 
     The details in the patents, patent applications and publications may be considered to be incorporable, at applicant&#39;s option, into the claims during prosecution as further limitations in the claims to the patentably distinguish any amended claims from any applied prior art. 
     Although only a few exemplary embodiments of this invention have been described in detail above, those skilled in the art will readily appreciate that many modifications are possible in the exemplary embodiments without materially departing from the novel teachings and advantages of this invention. Accordingly, all such modifications are intended to be included within the scope of this invention as defined in the following claims. In the claims, means-plus-function clauses, if any, are intended to cover the structures described herein as performing the recited function and not only structural equivalents but also equivalent structures. 
     The invention as described hereinabove in the context of the preferred embodiments is not to be taken as limited to all of the provided details thereof, since modifications and variations thereof may be made without departing from the spirit and scope of the invention.