Abstract As part of critical application used in railways transportation, space, chemical and nuclear industries, the processing part which controls the actuators of the electromechanical part is realized with fail-safe circuits. But these give use to the following problems. Complexity of design in case of redundant solutions, done till now, which require conventionnal fail-safe circuits. Necessity of off-line test sequences in case of non redundant solutions involving “strongly-failsafe” circuits. This paper ailns to provide a practical solution using “strongly-fail-safe” circuit fordesigning dependable COMputer systems aimed at critical processes. The goal is to make use of suchsystems easier, to avoid the drawbacks generated by off-line test phase and to obtain the best “costsafety”compromise. First of all, we introduce the scheme of a “strongly-fail-safe” basic cell without any off-I.ine testequipnents. The advantage is to obtain a “strongly-fail-safe” circuit which requires fewcOlnponents. Then, we suggest an architecture of a “strongly-fail-safe majority voted output” circuit designed from the “strongly-fail-safe” basic cell. The reliability, the safety and the availability of this ⤜majority voted output” mechanism is evaluated. In conclusion a triple modular redundancy computer system including this last mechanism iscOmpared with well known dependable cOmputer systems. The good results obtained show thatsuch a solution may meet a wide range of safe applications because of its low complexity and itsfitness to be easily implemented.
Read full abstract