Patent ID: 8346077

Claim:
A fail secure information transfer system, comprising: a first device operating in a first domain that is configured to output a first signal; a second device operating in a second domain that is connected to the first device to receive the first signal outputted by the first device and is configured to output a second signal; a controller connected to the first device and the second device, the controller configured to control the operational status of the first device and the second device between enabled operational states and disabled operational states, the controller including: a first status check module configured to determine if the first device is outputting the first signal when the first device is in a disabled operational state and to send a disable command signal to the second device to place the second device in the disabled operational state; and a second status check module configured to determine if the second device is outputting the second signal when the second device is in a disabled operational state and to send a disable command signal to the first device to place the first device in the disabled operational state.