Inventors:
Paul F. McLaughlin - Hatfield PA
Robert W. Bristow - Hatboro PA
Karl T. Kummer - Doylestown PA
Assignee:
Honeywell Inc. - Minneapolis MN
International Classification:
G06F 1120
Abstract:
A primary slave IOP, upon detecting an error, verifies the availability of a secondary slave IOP, and then sets an output control signal to indicate backup is requested. The primary slave IOP then takes itself out of being the primary. A secondary slave IOP, sensing that the output control signal from the other IOP has been set, assumes the roll of the primary slave IOP. A master controller, detecting an error with the primary slave IOP, interrogates the primary and secondary slave IOPs for a status input, and then arbitrates between the first and second IOP to determine the IOP that is to take on the primary role. Finally the master controller awards the more operational IOP the role of the primary slave IOP, thereby completing the failover operation.