Our goal is to design a distributed system with the characteristics listed above (fault-tolerant, highly available, recoverable, etc.), which means we must design for failure.

By detailed analysis of systematic failure in the Intelligent Gateway, we propose a fault tolerant design scheme of dual module hot spare, and make it into use.

The similar fault-tolerant condition and corresponding design method are also concluded in the case of actuator failure.