A highly reliable, multi-channel control, monitoring, and protection system includes
at least three processors in each of the redundant channels, a main processor,
and first and second monitor processors. The main processor performs the main control
functions, and the monitor processors mirror one or more of the functions performed
by the main processor. The processing performed in the main processor and the monitor
processors is continuously compared to determine whether control needs to be shifted
to one of the other redundant channels.
