CPC G06F 11/079 (2013.01) [G05B 19/0428 (2013.01); G06F 11/0724 (2013.01); G06F 11/0751 (2013.01); G06F 11/0778 (2013.01); G05B 2219/24024 (2013.01); G05B 2219/25257 (2013.01)] | 20 Claims |
1. A method in a system comprising a first microcontroller and a second microcontroller, the method comprising:
by the first microcontroller:
identifying a first candidate range of values, in a first set of candidate ranges of values, in which a first value of a first input falls, the first input received from a device; and
detecting a first ternary state of the device based on the first candidate range of values;
by the second microcontroller:
identifying a second candidate range of values, in a second set of candidate ranges of values, in which the first value falls, the first set of candidate ranges of values different from the second set of candidate ranges of values; and
detecting a second ternary state of the device based on the second candidate range of values; and
in response to detecting a fault state based on the first ternary state and the second ternary state, causing a command to be output to the device, the command causing the device to enter a safe state.
|