摘要:
As a component in a vital processing system, the vital driver includes hardware and software elements that enable it to produce a time sensitive output in response to receipt, on a batch basis, of check words. The number, content and rate of the check words are checked and used by the vital driver to produce a time sensitive output which can have parameters such as carrier frequency, modulation rate and duty cycle which are determined in part by the number, content and rate of receipt of the check words, and in part by the flawless execution of its own software. The vital driver software includes a number of significant elements including a vital starting delay, as well as modular components for producing different portions of the time sensitive output. Because of its modular nature, the software allows the production of an identical time sensitive output from groups of check words which are different in number and content, enabling the same vital driver to perform a checking function on primary processors which are running significantly different software.
摘要:
A vehicle carried profile generator generates a speed profile to control a vehicle governor at the transition from a higher to lower speed limit. The speed profile is calculated and checked to ensure it starts at a valid speed limit, continually decreases and is above a wayside speed limit. The governor is modified or controlled to inhibit brake application or a requirement for a brake application so long as actual speed is below profile speed.
摘要:
A vital communication system includes a conventional, that is non-vital, communication link, a transmitter and a receiver. The transmitter is responsive to input data, and provides for encoding and transmission as well as checking of its own input arrangement. The encoding and transmission is effected by a program driven device, but as loaded the program is incomplete. The checking produces certain check words which are used to complete the program so that only in those instances in which the checks are passed, will an appropriate message be transmitted. The receiver includes a decoder logic as well as a decoder check logic. The messages are decoded and applied to an output device. The decoder check logic checks that the information supplied to the output device corresponds to the decoded information, and if the check is passed, the output device is enabled to output the information to the outside world.
摘要:
A vital relay driver whose response time can be readily controlled such that the release time of the relay may be varied, yet may be held to very close tolerances. The vital relay driver is controlled by a microprocessor dedicated to this function, such processor generating a dynamic signal of fixed frequency in dependence on a cycle number which is continually replenished; otherwise the microprocessor stops producing the dynamic signal and the relay is released in a closely known time.
摘要:
There is disclosed a circuit for energizing a vital relay in response to an input signal that is modulated between two frequencies. A discriminator circuit responds to the modulated frequencies and alternately produces an output patented of one polarity and then a reverse polarity in response to the modulated signals. Coupled between the discriminator and the vital relay is a relay driver which responds to the output of the discriminator and energizes the vital relay. A d.c. power supply is coupled to the relay driver. The vital relay includes two windings. Failure of the modulation, the d.c. source or virtually any circuit element, will result in release of the vital relay. The disclosed embodiment uses photoresistors as switching elements.
摘要:
In some circumstances it is important to maintain a d.c. potential within a specific range of a critical value. The circuit shown will provide a fail-safe signal if the potential deviates from the allowed range. Two zener diodes and two optically coupled isolators are used. If the d.c. potential remains within the critical range, an a.c. test signal back biases one optically coupled isolator and forward biases the other on the positive half cycle; and on the negative half cycle back biases the other and forward biases the one. Thus the two optically coupled isolators conduct on alternate half cycles of the a.c. test signal. If the d.c. potential strays from the required range, the optically coupled isolators stop alternate conduction and a fail signal is given. If either zener diode should fail in a mode which alters its characteristics so that the circuit would fail to detect a voltage excursion outside the allowed range, a fail signal is given.
摘要:
A method for vital memory management of data. A method is disclosed for clearing on specified conditions and for assuring the clearing is effected. Both random access and stack operation are implemented. Clearing the memory area requires reading the contents of a given location and, assuming expected data is read, going on to process the next memory location. In one embodiment the contents of the given location are used to access the next location, thereby assuring that if unexpected data is read the process will not proceed normally.
摘要:
A vital communication system connects an input location to an output location using a non-vital communication link. In addition to transmitting, from the input location to the output location, a word with a bit dedicated to each different input, a system check word is transmitted. Each different input is assigned a unique multi-bit value, and the system check word comprises a linear combination of the unique multi-bit values for each of the inputs in a given binary state. Thus, there is a relationship between the transmitted words with bits dedicated to each input line and the system check word. At the output location, this correspondence is checked for. In addition, a further check is employed which first produces an output check word made up of a linear combination of the unique names for each output which are not in the given binary state. This output check word is then linearly combined with the received system check word. In the absence of a failure, the result of this linear combination of the output check word and the system check word should be constant regardless of the particular condition of different inputs and outputs, so long as the output and inputs actually correspond. Apparatus is provided to check for this constant result.
摘要:
A vital communication system includes a conventional, that is non-vital, communication link, a transmitter and a receiver. The transmitter is responsive to input data, and provides for encoding and transmission as well as checking of its own input arrangement. The encoding and transmission is effected by a program driven device, but as loaded the program is incomplete. The checking produces certain check words which are used to complete the program so that only in those instances in which the checks are passed, will an appropriate message be transmitted. The receiver includes a decoder logic as well as a decoder check logic. The messages are decoded and applied to an output device. The decoder check logic checks that the information supplied to the output device corresponds to the decoded information, and if the check is passed, the output device is enabled to output the information to the outside world.
摘要:
A vital digital control system with keyboard inputs for activating at least one output device in response to a manual keyboard selection of a sequence of the predetermined number of operation instructions, including a keyboard encoder for generating a message based on the operation instructions, a vital decoder coupled to the keyboard encoder for identifying each pair of message words and for producing diverse output words and diverse display words based on the message words and diverse display echo words based on the display words, and a display coupled to the decoder for displaying a representation of the display words. The vital decoder includes means for sequentially producing diverse multi-bit checkwords based on predetermined words generated by the system indicative of system performance, these predetermined words including the display words and the display echo words. The checkwords are produced in response to receipt of the message words and may be based additionally on diagnostic testing routines formed before, during, and after receipt of the keyboard instructions. The vital decoder compares each of the generated checkwords to a predetermined constant multi-bit pattern and produces a validation signal if sequential ones of the checkwords are complementary and are identical to the milti-bit pattern, whereupon the vital decoder activates output devices in accordance with the specific keyboard instructions, but only in the event that valid system operation is indicated by means of the presence of the validation signal.