This paper describes a fault-tolerant system that is based on two repl
icas of a self-checking module and on an error-masking interface. The
main contributions of this work rely on the fail-safe/strongly-fail-sa
fe design of the error-masking interface, and on the analysis of the c
ompetitiveness of this fault-tolerant scheme with respect to its relia
bility.