【正文】 puter not to crash, study how to reduce the risk interfered, it can befaulttoierant how is it after and make mistakes. This text is it act as some exploration from two these to try hard, hope these elementary opinions can play some function of casting a brick to attract jade, helpful to everybody。t present forever the mistake of the intact executive program. ② For having application that time sequence controlled , after being restored to the throne each time , should check first that see the sign left last cycle , in order to determine what is done this cycle . That is to say every is it restore to the throne operation of cycle to stride , by is it transmit to indicate all, these indicate while leaving in inside RAM , the zero clearing only when have the electricity for the first time. For example, the protecting synthetically device of abovementioned voltage transformer , is restored to the throne regularly according to the interval of 20ms. It reaches the normal working state through, certain movement order after having the electricity, such as Fig. 4。 But electricity or manual to rstore to the throne when pushing in conformity with zero clearing, is it embody to want when the software is worked outing at the beginning. If calculate time allows, try one39。 Next cycle , the mistake is corrected. So, so long as does not make mistakes in 2 cycles in succession, it is very faulttolerant to export Certainly, this kind of method will make the normal output change lag behind for one cycle, just really reflect the output end son. has the electricity to measure and restore to the throne manually Some system is it make some initialize and operate to want at electricity for the first time. Restored to the throne and already bee the beginning condition of normal running each time while adopting the way of restoring to the throne to run , it is unable to distinguish and have the electricity for the first time. In some pin connects the electric capacity of one ljIF to the ground, measure this pin after being restored to the throne, if low level to have electricity for the first time. Give system set up one restore to the throne button, that is to say a mon one manual to restore to the throne, this button is not joined and being restored to the throne in the end, is connected in parallel in the electric capacity both ends to the ground of abovementioned pins. 3. The software realizes the main point is it resume with zero clearing RAM to output Restore to the throne the last all pin turn high level into , is it should taKe place unnecessary change for low pin to make regularly, so, should resume the all pins immediately after being restored to the throne. There are 2 kinds of methods : ① Analyse and judge immediately after being restored to the throne this time, provide the state of the pin according to the need。 Otherwise, cant present forever the mistake of the intact executive integrated circuit in Ts and Tr period all can effectively the antijamming, but is best the unnecessary time arrangement in Tr. When the program time is long, when as far as possible the request reduces Tr, may join the differentiating circuit, like chart 1 center C30, R26, D9. Treatment of output end sons (1) Restore to the throne straight pulse During all I/O mouth of onechip puter turn into the high level when restoring to the throne. That is to say output for low pin normally, will according to restore to the throne cycle appear the width for the straight pulse of Tr. This straight pulse will influence the normal output, 2 methods are dealt with: ① Connect in parallel electric capacity suppress , capacity confirm according to Tr time that restore to the throne on the son in end. Reducing Tr can be reduced and connected the electric capacity in parallel. ② It is invalid to design the peripheral circuit into the high level. (2) Faulttolerant Choose the capacity that the output end connects the electric cap