Patent ID: 8260492

Claim:
A method for redundancy management comprising: providing a plurality of computing units each comprising: a plurality of redundant processing units for generating one or more redundant control commands; and one or more internal monitors for detecting one or more data errors in the control commands; providing a plurality of actuator control units having a pair of redundant computational lanes for analyzing control commands and providing feedback to the processing units; and initiating a selective and isolated recovery of one or more monitored applications in a processing unit of the plurality of processing units while one or more other applications remain undisturbed in the processing unit when: one or more data errors are detected in the one or more monitored applications by one or more of the internal monitors; or one or more data errors are detected in the one or more monitored applications by one or more of the actuator control units; wherein the recovery restores the most recent error-free congruent set of state data for any one or more of the selected applications simultaneously.