Abstract:This paper studies the redundancy configuration of CPU module of the triple modular redundancy fly control computer without signal peer invalid problem which may be caused by the hardware voter. The information of computer’s critical parameter by self-test is used to participate in the channel voting. The clock synchronization signal generated by mutual feedback independent clock is used to provide the millisecond interruption for flight control software. The majority and median voting algorithm are adopted for monitoring and choosing the digital, discrete and analog signals of input and output. Functional test results show that the redundancy management can effectively deal with the typical failure modes. The future directions of channel isolation and heterogeneous optimization design of hardware and software are prospected.