The Design of Totally Self-Checking Systems - David Su-Ming Ho (1976)