CPC G06F 8/65 (2013.01) | 17 Claims |
1. A redundant system that controls one load by a plurality of control systems having a redundant configuration, the redundant system comprising:
a non-transitory computer-readable medium configured to store instructions executable by one or more processors, the instructions, when executed by the one or more processors, cause:
when an update program signal for the plurality of control systems is received, an update of a control program for each of the plurality of control systems in a predetermined order to be individually executed;
when a start request of the load is received during the execution of the update of a control program of one predetermined system, the load to be controlled by a system other than the one predetermined system; and
during control of the load by the system other than the one predetermined system:
the update of the control program of the one predetermined system to be continued; or
a rollback of the control program of the one predetermined system to be executed, and
wherein a control program update state of each system of the plurality of control systems is managed as a flag.
|