System Description: Fail-safe

To prevent improper operation, the multiplex control system has a fail-safe function. In the fail-safe mode, the output signal is fixed when any part of the system malfunctions (for example, a faulty control unit or communication line).

Each control unit has a hardware fail-safe function that fixes the output signal when there is any CPU malfunction, and a software fail-safe function that ignores the signal from the malfunctioning control unit and allows the rest of the system to operate normally.