Redundant computing architecture
View Patent ↗A redundant computing architecture includes a first control unit, a second control unit, and a switch. The first control unit is configured to provide a first control signal in response to a sensory input and is further configured to provide a health status indicator that is indicative of a fault condition within the first control unit. Additionally, the second control unit is configured to provide a second control signal in response to the sensory input. Each of the first and second control signals is respectively operative to control an actuator. The switch is configured to: receive the health status indicator, the first control signal, and second control signal; provide the first control signal to the actuator if this health status indicator does not indicate a fault: and provide the second control signal to the actuator if this health status indicator does indicate a fault.
1. A redundant computing architecture comprising:
a first, primary, control unit configured to provide a first control signal having a first magnitude in response to a sensory input and to provide a health status indicator indicative of a fault condition within the first control unit, wherein the first control signal is configured to operate an actuator;
a second, backup, control unit configured to provide a second control signal having a second magnitude in response to the sensory input, wherein the second control signal is configured to operate the actuator;
a switch configured to receive the health status indicator, the first control signal, and second control signal;
wherein the switch is configured to provide the first control signal to the actuator if the health status indicator does not indicate a fault within the first control unit;
wherein the switch is configured to provide an indicator indicative of a fault within the first control unit and to provide the second control signal to the actuator if the health status indicator does indicate a fault within the first control unit;
wherein the switch is configured to determine an absolute difference between the first magnitude and the second magnitude, compare the absolute difference to a threshold, and provide the indicator if the absolute difference exceeds the threshold;
wherein the indicator includes a limited operation signal provided to each of the first control unit and the second control unit; and
wherein the limited operation signal is configured to prevent further operation of both the first control unit and the second control unit following a predefined event.
2. The computing architecture of claim 1 , wherein the predefined event includes placing the architecture in a stationary state or disabling the computing architecture.
3. The computing architecture of claim 1 , wherein the indicator includes a warning light.
4. The computing architecture of claim 1 , wherein the first control unit includes a first processing device and a diagnostic device, wherein the first processing device is configured to provide the first control signal in response to the sensory input, and wherein the diagnostic device is configured to provide the health status indicator in response to the operation of the first processing device.
5. The computing architecture of claim 4 , wherein the health status indicator is indicative of a fault within the first processing device.
6. A redundant computing architecture comprising:
a first control unit including:
a first processing device configured to provide a first control signal having a first magnitude in response to a sensory input, wherein the first control signal is operative to control an actuator; and
a diagnostic device configured to provide a health status indicator in response to the operation of the first processing device, wherein the health status indicator is indicative of a fault within the first processing device;
a second control unit including a second processing device configured to provide a second control signal having a second magnitude in response to the sensory input, wherein the second control signal is operative to control the actuator;
a switch configured to receive the health status indicator, the first control signal, and second control signal;
wherein the switch is configured to determine an absolute difference between the first magnitude and the second magnitude, compare the absolute difference to a threshold, and provide an indicator if the absolute difference exceeds the threshold;
wherein the switch is configured to provide the first control signal to the actuator if the health status indicator does not indicate a fault within the first control unit; and
wherein the switch is configured to provide the second control signal to the actuator if the health status indicator does indicate a fault within the first control unit;
wherein the switch is further configured to provide the indicator if the health status indicator indicates a fault within the first control unit;
wherein the indicator includes a limited operation signal provided to each of the first control unit and the second control unit; and
wherein the limited operation signal is configured to prevent further operation of both the first control unit and the second control unit following a predefined event.
7. The computing architecture of claim 6 , wherein the predefined event includes placing the architecture in a stationary state or disabling the computing architecture.
8. The computing architecture of claim 6 , wherein the indicator includes a warning light.