An independent and interlocking redundancy system comprising: - one or more control targets; - operation processors (3α, 3β) configured to transmit, independently from each other and by taking turns according to a predetermined timing, a control command to the one or more control targets; and - one or more standby processors configured to: - monitor an end signal transmitted from the communication network for each predetermined timing; - make a transition from a standby state to a warming-up state when one of the operation processors (3α, 3β) malfunctions, wherein it is determined that one of the operation processors (3α, 3β) malfunctions, in a case where, despite an arrival of timing, a corresponding end signal is not transmitted from the communication network; - during the warming-up state, temporarily store a control command transmitted by a non-malfunctioning one of the operation processors; - read out the control command transmitted by the non-malfunctioning one of the operation processors (3α, 3β) from the memory and transmit, in the warming-up state and to the one or more control targets, the read-out control command, at a timing at which the malfunctioning one of the operation processors (3α, 3β) is supposed to transmit the control command to the one or more control targets, and - determine the control command and transmit, to the one or more control targets, the determined control command independently from non-malfunctioning one or more of the operation processors (3α, 3β) and by taking turns with respect to the non-malfunctioning one or more of the operation processors (3α, 3β), after the warming-up state and warm-up of the one or more of standby processors is completed; and - uniquely determine a control command in the warming-up state; wherein the one or more standby processors is configured to determine that the warm-up of the one or more standby processors is completed, when a difference between the control command transmitted by the non-malfunctioning one of the operation processors (3α, 3β) and the control command uniquely determined by the one or more standby processors (3γ) in the warming-up state falls within a predetermined error range. - one or more control targets; - operation processors (3α, 3β) configured to transmit, independently from each other and by taking turns according to a predetermined timing, a control command to the one or more control targets; and - one or more standby processors configured to: - monitor an end signal transmitted from the communication network for each predetermined timing; - make a transition from a standby state to a warming-up state when one of the operation processors (3α, 3β) malfunctions, wherein it is determined that one of the operation processors (3α, 3β) malfunctions, in a case where, despite an arrival of timing, a corresponding end signal is not transmitted from the communication network; - during the warming-up state, temporarily store a control command transmitted by a non-malfunctioning one of the operation processors; - read out the control command transmitted by the non-malfunctioning one of the operation processors (3α, 3β) from the memory and transmit, in the warming-up state and to the one or more control targets, the read-out control command, at a timing at which the malfunctioning one of the operation processors (3α, 3β) is supposed to transmit the control command to the one or more control targets, and - determine the control command and transmit, to the one or more control targets, the determined control command independently from non-malfunctioning one or more of the operation processors (3α, 3β) and by taking turns with respect to the non-malfunctioning one or more of the operation processors (3α, 3β), after the warming-up state and warm-up of the one or more of standby processors is completed; and - uniquely determine a control command in the warming-up state;