Safety-relevant computer system
A safety-relevant computer system, in particular a railway safety system, contains at least two hardware channels. A memory check results of the channels are fed to at least one comparator, which triggers an error response if the memory check results are not equal. In order to be able to use diverse software programs created by compilers, memory check results of the diverse software programs of each channel are fed to the comparator. The memory check results of a first software program of the first and second channels are compared with each other and the memory check results of a second software program of the first and second channels are compared with each other.
1. A safety-relevant computer system, comprising:
at least one comparator; and
at least two hardware channels including a first hardware channel and a second hardware channel, wherein memory check results of said hardware channels are forwarded to said at least one comparator, said at least one comparator triggering an error response if the memory check results are not equal, each of said hardware channels having compilers and at least two diverse software programs built by said compilers, the memory check results of said diverse software programs being forwarded to said comparator, wherein the memory check results of a first software program of said first and second hardware channels being compared with one another and the memory check results of a second software program of said first and second hardware channels are compared with one another.
2. The safety-relevant computer system according to claim 1 ,
further comprising an output comparator; and
wherein each of said hardware channels and each of said diverse software programs has precisely one common output module, wherein said output module of all of said hardware channels are connected to said output comparator.
3. The safety-relevant computer system according to claim 1 , wherein the safety-relevant computer system is a railway safety system.
4. A method of operating a safety-relevant computer system, which comprises the steps of:
operating at least two hardware channels including a first hardware channel and a second hardware channel, each of the hardware channels having compilers and at least two diverse software programs being built by the compilers;
generating memory check results of the diverse software programs of the hardware channels; and
forwarding the memory check results of the hardware channels to at least one comparator, the at least one comparator triggering an error response if the memory check results are not equal, wherein the memory check results of a first software program of said first and second hardware channels being compared with one another and the memory check results of a second software program of said first and second hardware channels are compared with one another.