| Abstract: | This paper deals with the problem of developing models for microcomputer systems related to the safety of control (abbreviated as MSS). Two actual MSS systems are discussed, one (system Smic1 is non-redundant and the other (system Smic2) is dual-redundant (1-out-of-2:F). A method to categorize system failure states as fail-safe or fail-dangerous is proposed and a general model for MSS is developed. Based on these results, analytical models for reliability and fail-safety evaluation of the above two actual systems, Smic1 and Smic2, are established. |
