6 ms·
What's the upside of two identical computers computing the same input? I can understand a backup if the first fails, but why two identical systems contemporane
by CriticalCathed 7y ago
What's the upside of two identical computers computing the same input?
I can understand a backup if the first fails, but why two identical systems contemporaneously computing?
- makomk 7y agoProtects against certain kinds of transient hardware faults that are common enough to worry about in safety-critical systems, I think.
- Aardwolf 7y agoHow does it know which of the two is correct?
- ethbro 7y agoSee above comment. With 2, you don't. With 3, you do. But if there's a human in the loop and a manual alternate control pathway, detecting a disagreement allows you to cue the manual operator and transfer control to them. Or fall back to a much simpler system of computer aid. With 1, hardware failures are extremely hard to detect at all, as even your computational checks for internal consistency are subject to mutation.
- noir_lord 7y ago> See above comment. With 2, you don't. With 3, you do. Unless all 3 different give different results, two failures and one correct. IIRC the shuttle had a 3+1 system 3 as a cohort with voting and if they couldn't reach consensus the 1 was a minimal system that could keep the lights on.
- danjayh 7y agoYou don't need to. You just need to know that the module as a whole has a fault. Reboot the module and let the hot spare take over (all critical functions have a hot spare).
- DennisP 7y agoNPR just did a piece on cosmic rays, saying they cause hardware faults way more often than people realize. In one case they switched off a passenger jet's autopilot. They're also getting blamed for the Toyota unintended accelerations. They said it's common now in critical systems to use three computers and ignore any single computer that disagrees with the other two.