A new modelling approach to the safety evaluation of N-modular redundant computer systems in presence of imperfect maintenance