Automatic fault detection and recovery system which provides stability and continuity of operation in an industrial multiprocessor control

摘要

A multiprocessor computer control system for a process includes at least two central processors and respectively associated input/output systems. Control system faults are detected and a bootstrap microprocessor is triggered into its fault detector and recovery mode. The output control signals are placed on and central processors are stopped and restarted and then it is determined which if any of them is to be inoperative. A reconfigured control system is defined with the inoperative unit(s) excluded. The microprocessor switches the input/output systems as necessary to structure the control system in reconfigured form so that process control can resume without disturbance.