In a system of two, it is uncertain which one has failed, so all units come offline. In a system of three, a failure can be detected if one disagrees with the other two. It will say "LAND 3" or "LAND 2" respectively. Let's take the Boeing 777 because it is easy to begin with. The exact number of autopilots required to make this work, however, is debatable and much depends on how you define it. The quoted explanation about "fail operational" and "fail passive" is correct, in that "fail operational" means the system will continue to function after an failure, and "fail passive" means the system will not misbehave after an failure.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |