Abstract: A control system for calculating control commands for actuators in an aircraft, wherein the control commands are calculated by computers distributed in the craft in dependence on input signals containing parameters that serve as the basis for said commands, wherein a computer (C) is arranged at each respective local actuator (A) and, together with the actuator (A), forms a servo node (S) where the computer (C) receives input signals via data bus (B), whereby the computer (C) in each servo node (S) calculates control commands for the local actuator (A) based on one or more sets of control laws in dependence on received parameters, and wherein the computer (C) calculates, in a corresponding manner, control commands for at least one additional actuator (A) in another servo node (S), and wherein a choice of control commands is used as the control command (7) for the actuator (A) locally in each servo node (S) in dependence on a comparison between the control commands (4) calculated locally in the servo node (S) a

Abstract: A computer system and method are provided for executing multiple software of different mission-criticality. The computer system includes at least one access control circuit to prevent access to memory assigned to software of greater mission-criticality by software of lesser mission-criticality. The access control circuit is configured to be in a first position allowing access to a first memory for purposes of data retrieval and storage when the greater mission-critical software is executing and in a second position when a lesser mission-critical software is executing, allowing access to a second memory but preventing access to the first memory. The greater mission-critical software is configured to provide control signals to the access control circuit instructing the access control circuit to maneuver to the second position, when necessary, by generating an interrupt.

Abstract: A computer system and method are provided for executing multiple software of different mission-criticality. The computer system includes at least one access control circuit to prevent access to memory assigned to software of greater mission-criticality by software of lesser mission-criticality. The access control circuit is configured to be in a first position allowing access to a first memory for purposes of data retrieval and storage when the greater mission-critical software is executing and in a second position when a lesser mission-critical software is executing, allowing access to a second memory but preventing access to the first memory. The greater mission-critical software is configured to provide control signals to the access control circuit instructing the access control circuit to maneuver to the second position, when necessary, by generating an interrupt.