Patent ID: 7822516

Claim:
An automotive vehicle having a pre-selected function, the vehicle comprising: at least one controller which controls an object and includes a plurality of redundant elements which are redundant with each other; a memory which stores a pre-set time which assures that an occurrence probability is smaller than a target probability, the occurrence probability being a probability that, in an event that at least a first pre-selected failure which has occurred to one of the redundant elements has not been solved while another, normal redundant element has operated since an occurrence of the first failure, a second pre-selected failure may occur to the normal redundant element within the pre-set time measured from the occurrence of the first failure; and at least one function restraining portion which at least partially restrains the pre-selected function of the vehicle, when at least the first pre-selected failure has not been solved before the normal redundant element has operated, since the occurrence of the first failure, more than the pre-set time stored by the memory.