故障后保全功能系统

fail functional system