EP1675003A3 - Fault tolerant system and controller, operation method, and operation program used in the fault tolerant system