Disclosed is a redundant hot standby control system including K industrial personal computers, with a plurality of virtual control devices being established thereon respectively, at least one of the plurality of virtual control devices being established on each IPC as a main control device; and the other virtual control devices being standby control devices. Each of the standby control devices corresponds to a virtual control device, which serves as the main control device on another IPC, except for the IPC to which the standby control device itself belongs. A procedure, which is the same as that operated on the main control device corresponding thereto, is operated on the standby control device. A control bus of the system is used for connecting a plurality of the M IPCs; and a field bus is used for connecting the M IPCs and a plurality of field devices.

Disclosed is a redundant hot standby control system including K industrial personal computers, with a plurality of virtual control devices being established thereon respectively, at least one of the plurality of virtual control devices being established on each IPC as a main control device; and the other virtual control devices being standby control devices. Each of the standby control devices corresponds to a virtual control device, which serves as the main control device on another IPC, except for the IPC to which the standby control device itself belongs. A procedure, which is the same as that operated on the main control device corresponding thereto, is operated on the standby control device. A control bus of the system is used for connecting a plurality of the M IPCs; and a field bus is used for connecting the M IPCs and a plurality of field devices.

In a continuously variable transmission of an electric actuator system from which a hydraulic pressure generator such as an oil pump is excluded, it is necessary to cut off power supply to an actuator and turn a motor into an inoperative state similarly in a hydraulic actuator system in order to prevent unintended sudden acceleration or deceleration when a fail state is formed due to microcomputer failure of an electronic control device. As a result, a belt-slipping state occurs causing traveling failure. Thus, a master CPU (for control) and a slave CPU (for monitoring), which are configurations of an existing electronic control device are used. Both CPUs have monitoring functions configured to perform mutual monitoring. In addition, the existing electronic control device is also considered as a monitoring device via a network to provide a monitoring configuration among the three devices to accurately specify the failure part (CPU).

In a continuously variable transmission of an electric actuator system from which a hydraulic pressure generator such as an oil pump is excluded, it is necessary to cut off power supply to an actuator and turn a motor into an inoperative state similarly in a hydraulic actuator system in order to prevent unintended sudden acceleration or deceleration when a fail state is formed due to microcomputer failure of an electronic control device. As a result, a belt-slipping state occurs causing traveling failure. Thus, a master CPU (for control) and a slave CPU (for monitoring), which are configurations of an existing electronic control device are used. Both CPUs have monitoring functions configured to perform mutual monitoring. In addition, the existing electronic control device is also considered as a monitoring device via a network to provide a monitoring configuration among the three devices to accurately specify the failure part (CPU).

A method is provided for selecting a plurality of program functions for providing repeatedly implemented functions, e.g., in a vehicle, ship or in an aircraft. The method includes determining a first total performance value based on recorded first single performance values and recorded first dependencies, determining a first total performance value based on determined second single performance values and recorded second dependencies, determining a cluster performance from the first total performance value and from the second total performance value, and the cluster performance value or at least one value determined from the cluster performance value is used for selecting the program functions or of other program functions for providing the repeatedly implemented functions.

A method is provided for selecting a plurality of program functions for providing repeatedly implemented functions, e.g., in a vehicle, ship or in an aircraft. The method includes determining a first total performance value based on recorded first single performance values and recorded first dependencies, determining a first total performance value based on determined second single performance values and recorded second dependencies, determining a cluster performance from the first total performance value and from the second total performance value, and the cluster performance value or at least one value determined from the cluster performance value is used for selecting the program functions or of other program functions for providing the repeatedly implemented functions.