Autonomous ready vehicle and accessory devices for such vehicle
Patent Information
- Authority / Receiving Office
- AU · AU
- Patent Type
- Applications
- Current Assignee / Owner
- POLARIS IND INC
- Filing Date
- 2026-06-19
- Publication Date
- 2026-07-09
AI Technical Summary
Existing autonomous vehicle systems lack effective mechanisms to accurately translate commands from remote or autonomous controllers to vehicle systems, leading to potential conflicts and inefficiencies in operation.
Implementing a vehicle control system with a communication interface that supports remote and autonomous modes, utilizing a CAN architecture for interfacing with vehicle control modules, and a wiring harness for by-wire override control, along with authentication protocols to ensure secure and reliable command execution.
Enables seamless operation in remote and autonomous modes, resolves command conflicts, and ensures secure vehicle control by authenticating third-party access, enhancing the reliability and safety of vehicle systems.
Smart Images

Figure 00000002_0000 
Figure 00000031_0000 
Figure 00000032_0000
Abstract
Description
DIVISIONAL CLAIM 5
[0001] The present application is a divisional application derived from Australian patent application 2024203607 which in turn is a divisional application derived from Australian patent application 2022202756 which in turn is a divisional application derived from Australian patent application 2020204368 which in turn is a divisional application derived from Australian patent application 2015362825 which in turn is the national phase in Australia of patent application 10 PCT / US2015 / 065586, all titled Autonomous Ready Vehicle, the contents of the specifications of which are hereby incorporated by reference. FIELD OF THE INVENTION
[0002] The present invention is concerned with autonomous ready vehicles and accessory devices for such vehicle, including vehicles configured to receive commands from an 15 autonomous controller or remote controller to control vehicle functions using at least one gateway communication interface module. BACKGROUND OF THE INVENTION
[0003] Vehicles configured to receive commands from an autonomous controller or remote controller to control vehicle functions are known in the art. For example, patent publication 20 US2011 / 0071718 A discloses a vehicle having a communication network having a plurality of vehicle devices coupled thereto, a vehicle control unit coupled to the communication network and able to control a first subset of the plurality of devices via the communication network to effect vehicle operation; the vehicle control unit operable to receive input from a second subset of the vehicle devices via the network and to control the first subset of the plurality of devices 25 responsive to the input received from the second subset of vehicle devices, input from the second subset of vehicle devices being indicative of operator interaction with one or more of the vehicle devices, and a network interface operable to couple to an autonomous vehicle controller such that the autonomous vehicle controller is able to selectively effect vehicle operation via the first subset of vehicle devices independent of input from the second subset of vehicle devices. 30
[0004] It would be advantageous to further develop autonomous ready vehicle systems to better inform commands from the remote controller to one or more vehicle systems for these to 2026204780 19 Jun 2026 be actioned. SUMMARY OF THE INVENTION
[0005] The present invention can be respectively implemented in an accessory device for a vehicle configured for one or both of autonomous as well as remote control modes of oepration, 5 a vehicle with a vehicle control unit configured to allow one or both of autonomous as well as remote control modes of operation, and a method which allow remote controlling of a vehicle using an autonomous or remote (e.g. drive-by-wire) controller that can be interfaced with one or more vehicle operation and / or control modules. Vehicle functions including steering, braking, starting, etc. are controllable by wire via a control network. A CAN architecture available from 10 Polaris Industries, Inc. can be used as an interface between the remote / autonomous controller and the vehicle’s various functional control modules. A CAN module interface illustratively provides communication between the vehicle control system and a supervisory, remote, autonomous, or drive-by-wire controller. The interface permits the supervisory control to control vehicle operation within pre-determined bounds and using control algorithms. 15
[0006] Accordingly, in a first aspect, the present invention provides a vehicle, comprising: a communication interface communicatively coupled to a vehicle controller and a remote controller, the communication interface configured to receive commands from the remote controller and send the received commands to the vehicle controller, wherein the vehicle controller is configured to control the vehicle in three modes, including a remote operating mode 20 in response to the commands received from the remote controller via the communication interface, an autonomous operating mode in an absence of the commands from the remote controller, and a manual operating mode; an engine control module communicatively coupled to the vehicle controller and configured to control a vehicle engine start, a vehicle engine stop, and a vehicle throttle position, wherein the vehicle throttle position corresponds to a vehicle pedal 25 position, an acceleration command received from the remote controller, or a combination thereof; and a wiring harness configured to provide by-wire override control of the vehicle to control the vehicle, wherein the communications interface is operatively coupled to the wiring harness.
[0007] In one embodiment the wiring harness comprises an inline connector positioned 30 between a vehicle key switch connector and a vehicle wiring to provide a pass-through connection in the remote operating mode. The wiring harness may further comprise an auto / manual bypass circuit configured, in the remote operating mode, to bypass a key switch 2026204780 19 Jun 2026 signal path and to provide an electronically controlled ignition signal path to the engine control module to control a vehicle engine start and a vehicle engine stop.
[0008] In one embodiment, the auto / manual bypass circuit comprises a first electrically controllable switching element configured to switch between a first input signal and a second 5 input signal to provide an output signal used to control the vehicle engine start and the vehicle engine stop. The first electrically controllable switching element can be configured to receive the first input signal from the communication interface and the second input signal from an unswitched power source. Preferably, the output signal is provided as an input signal into a second electrically controllable switching element, wherein the second electrically controllable 10 switching element comprises a default open switch that receives the input signal, and wherein the second electrically controllable switching element is configured to selectively bypass an auto / manual mechanical key switch to provide for the electronically controlled ignition signal. A third electrically controllable switching element and a fourth electrically controllable switching element may be provided, wherein the third electrically controllable switching element is 15 configured to receive a crank input signal and to actuate a switch based on the crank input signal to provide a brake switch signal to the fourth electrically controllable switching element which may be configured to provide the brake switch signal as a crank output signal into a starter motor to control the vehicle engine start.
[0009] In one embodiment, the vehicle controller is further configured to initiate a vehicle 20 stop procedure if external communication with the vehicle is lost when operating in the remote operating mode. The stop procedure can comprise automatically applying one or more brakes included in the vehicle based on a monitoring of a ground-based speed of the vehicle, a monitoring of a steering angle of the vehicle, or a combination thereof.
[0010] Advantageously, the remote controller can be configured to transmit the commands 25 to the communication interface which, in one embodiment, comprises a controller area network (CAN) module communicatively coupled to an accessory hardware platform included in the vehicle via a CAN bus, wherein the CAN module is configured to transmit and receive a message to the accessory hardware platform via the CAN bus. The accessory hardware platform may in turn comprise a smart accessory hardware controlled via a third-party application 30 software that communicates with a CAN accessory application programming interface (API) software to control the smart accessory hardware.
[0011] Advantageously, the remote controller may be configured to be authenticated via a 2026204780 19 Jun 2026 seed key exchange.
[0012] In another aspect, the present invention provides a method of operating a vehicle, comprising: receiving, via a communications interface of the vehicle, commands from a remote controller device; sending, via the communications interface, the commands to a vehicle 5 controller of the vehicle, wherein the vehicle controller is configured to operate in three modes comprising a remote operating mode in response to the commands received from the remote controller via the communication interface, an autonomous operating mode in an absence of the commands from the remote controller, and a manual operating mode; controlling, via an engine control module communicatively coupled to the vehicle controller, a vehicle engine start, a 10 vehicle engine stop, and a vehicle throttle position, wherein the vehicle throttle position corresponds to a vehicle pedal position, an acceleration command received from the remote controller, or a combination thereof; and providing, via a wiring harness of the vehicle, by-wire override control of the vehicle to control the vehicle, wherein the communications interface is operatively coupled to the wiring harness. 15
[0013] In accordance with yet another aspect, the present invention may be embodied in a non-transitory computer-readable medium comprising encoded instructions that, when executed by one or more processors of a vehicle, cause the one or more processors to: receive, via a communications interface of the vehicle, commands from a remote controller device; send, via the communications interface, the commands to a vehicle controller of the vehicle, wherein the 20 vehicle controller is configured to operate in three modes comprising a remote operating mode in response to the commands received from the remote controller via the communication interface, an autonomous operating mode in an absence of the commands from the remote controller, and a manual operating mode; control, via an engine control module communicatively coupled to the vehicle controller, a vehicle engine start, a vehicle engine stop, and a vehicle throttle position, 25 wherein the vehicle throttle position corresponds to a vehicle pedal position, an acceleration command received from the remote controller, or a combination thereof; and provide, via a wiring harness of the vehicle, by-wire override control of the vehicle to control the vehicle, wherein the communications interface is operatively coupled to the wiring harness.
[0014] Also disclosed herein is an accessory device for a vehicle, comprising: a transceiver 30 configured to communicate via a communication network of the vehicle; a processor communicatively coupled to the transceiver; and memory storing instructions that, when executed by the processor, cause the accessory device to perform a set of operations, the set of 2026204780 19 Jun 2026 operations comprising: receiving, via the transceiver, a proprietary message from the communication network of the vehicle; generating, based on a software library associated with the vehicle, a translated message corresponding to the received proprietary message; and providing an indication of the translated message to a software application that includes the 5 software library. Advantageously, the transceiver is configured to be removably coupled with the communication network via an accessory port of the vehicle. Preferably, the communication network is a controller area network (CAN) bus of the vehicle.
[0015] The software library may include a set of predefined function calls that includes at least one of: a function call to get information associated with a powertrain of the vehicle; or a 10 function call to get information associated with movement by the vehicle.
[0016] Also disclosed herein is a vehicle, comprising: a plurality of ground engaging members; a motor coupled to the plurality of ground engaging members, the motor configured to drive the plurality of ground engaging members; a communication interface configured to communicate with a controller that is remote from the vehicle, the communication interface 15 configured to receive one or more commands from the controller; and a vehicle control unit coupled to the communication interface and configured to, in an autonomous control mode of operation: provide, via the communication interface, an indication of an operating condition of the vehicle; receive, via the communication interface, a first command corresponding to the indicated operating condition; and control operation of the vehicle based on the first command; 20 and, in a remote control mode of operation: receive, via the communication interface, a second command corresponding to user input received from a vehicle operator, and control operation of the vehicle based on the second command.
[0017] Preferably, the first command and the second command are each received from the same controller that is remote from the vehicle. Advantageously, the vehicle control unit can be 25 further configured to, in the remote control mode of operation, provide an indication an operating condition of the vehicle via the communication interface for display to the vehicle operator.
[0018] Further disclosed herein is a vehicle, comprising: a plurality of ground engaging members; a motor coupled to the plurality of ground engaging members, the motor configured to drive the plurality of ground engaging members; a communication interface configured to 30 communicate with a controller that is remote from the vehicle, the communication interface configured to receive one or more commands from the controller; and a vehicle control unit coupled to the communication interface and configured to: receive, from the controller via the 2026204780 19 Jun 2026 communication interface, a command; control operation of the vehicle based on the received command; and based on a determined absence of communication with the controller, enable autonomous control of the vehicle.
[0019] Preferably, the vehicle control unit is further configured to: determine, after the 5 determined absence of communication with the controller, a presence of the controller; and based on the determined presence of the controller, disable autonomous control of the vehicle.
[0020] Preferably, enabling autonomous control of the vehicle comprises permitting control of the vehicle by an autonomous vehicle controller which, advantageously, may be mounted in the vehicle. 10
[0021] In one embodiment, the command received by the vehicle control unit is a first command and the vehicle further comprises a sensor configured to sense an operating condition of the vehicle, the vehicle control unit being further configured to, based on the determined absence of communication with the controller: communicate the operating condition to the autonomous vehicle controller; receive, from the autonomous vehicle controller, a second 15 command based on the operating condition; and control operation of the vehicle based on the second command. Advantageously, the operating condition comprises at least one of a vehicle status or sensor information.
[0022] In all aspects, the vehicle’s internal communication network will typically have a plurality of vehicle devices coupled thereto, wherein the vehicle control unit is coupled to the 20 communication network and able to control a first subset of the plurality of devices via the communication network to effect vehicle operation. The vehicle control unit is further operable to receive input from a second subset of the vehicle devices via the network and to control the first subset of the plurality of devices responsive to the input received from the second subset of vehicle devices, input from the second subset of vehicle devices being indicative of operator 25 interaction with one or more of the vehicle devices. The network interface is further operable to couple to the autonomous vehicle controller such that the autonomous vehicle controller is able to effect vehicle operation via the first subset of vehicle devices independent of input from the second subset of vehicle devices.
[0023] Also disclosed herein is a vehicle including: a communication network having a 30 plurality of vehicle devices coupled thereto; a vehicle control unit coupled to the communication network and able to control a first subset of the plurality of devices via the communication network to effect vehicle operation, the vehicle control unit operable to receive input from a 2026204780 19 Jun 2026 second subset of the vehicle devices via the network and to control the first subset of the plurality of devices responsive to the input received from the second subset of vehicle devices, input from the second subset of vehicle devices being indicative of operator interaction with one or more of the vehicle devices; and a network interface operable to couple to an autonomous 5 vehicle controller such that the autonomous vehicle controller is able to effect vehicle operation via the first subset of vehicle devices independent of input from the second subset of vehicle devices.
[0024] Also disclosed herein is a method of providing autonomous vehicle operation that includes the following steps: providing the vehicle with a vehicle-internal communication 10 network having a plurality of vehicle operation devices coupled thereto, the plurality of vehicle operation devices configured for overall operation of the vehicle, the plurality of vehicle operation devices including a first subset of devices that operate based upon instructions from the vehicle’s own control unit, the plurality of vehicle operation devices including a second subset of devices that provide input to the vehicle control unit, the input being indicative of operator 15 interaction with one or more of the vehicle devices; and providing an interface to the vehicleinternal communication network such that inputs can be received, via the interface, from an autonomous (i.e. vehicle-external) vehicle controller, thereby allowing the autonomous vehicle controller to control the first subset of vehicle devices independent of input from the second subset of vehicle devices. 20
[0025] The vehicle-internal communications network can be a Controller Area Network (CAN) with a CAN interface operable to communicate with various control modules of the vehicle over the CAN; a mode switch coupled to the CAN interface is selectively operable between a manual operation mode and an autonomous control mode; a gateway communication interface module is configured or configurable and operable to cause commands received from 25 the autonomous controller to be translated into commands operable with the vehicle control modules in response to determining authentication of the autonomous controller and the mode switch being in the autonomous control mode.
[0026] Additional features of the present invention will become apparent to those skilled in the art upon consideration of the following detailed description of illustrative embodiments 30 exemplifying ways of carrying out the invention in practice. BRIEF DESCRIPTION OF THE DRAWINGS
[0027] The detailed description of the drawings particularly refers to the accompanying 2026204780 19 Jun 2026 figures in which:
[0028] Fig. 1 is a block diagram illustrating components of an autonomous ready vehicle of an illustrated embodiment of the present disclosure;
[0029] Fig. 2 is a block diagram illustrating communication between a CAN communication 5 network module of the vehicle and an accessory hardware platform and accessory software;
[0030] Fig. 3 is a flowchart illustrating steps performed during normal operation in an autonomous or remote control mode and during a lockout mode of operation;
[0031] Fig. 4 is an exemplary wiring harness used to provide by-wire override control of the vehicles ignition; 10
[0032] Fig. 5 is a flowchart showing illustrative steps performed to authenticate a module sending instructions to the vehicle; and
[0033] Fig. 6 is a flowchart showing illustrative steps that permit autonomous operation of the vehicle. 15 DETAILED DESCRIPTION OF THE DRAWINGS
[0034] For the purposes of promoting an understanding of the principles of the present disclosure, reference will now be made to certain illustrated embodiments and drawings. The embodiments disclosed below are not intended to be exhaustive or limit the invention to the precise form disclosed in the following detailed description. Rather, the embodiments are 20 chosen and described so that others skilled in the art may utilize their teachings. It will be understood that no limitation of the scope of the invention as defined in the claims that follow this description, is thereby intended. The invention includes alterations and further modifications in the illustrated devices and described methods and further applications of the principles of the invention which would normally occur, without inventive skill, to one skilled in the art to which 25 the invention relates.
[0035] U.S. Patent Application Publication No. 2014 / 0288763; U.S. Patent No. 8,534,397; PCT International Publication No. WO 2014 / 134148; and U.S. Patent Application Publication No. 2014 / 0244110 are all expressly incorporated by reference herein, as features disclosed herein may be used in combination with features disclosed in those patent documents. 30
[0036] Fig. 1 illustrates components of an autonomous ready vehicle 10 of the present disclosure. Vehicle 10 is configured to be controlled by an autonomous or remote controller 12. The controller 12 may be an autonomous controller for controlling the vehicle 10 without any 2026204780 19 Jun 2026 human interaction. The controller 12 may also be a remote controller where an operator uses an input device such as pedals, a joystick, a computer, or other controller to guide the vehicle 10. Functions of the controller 12 also include obstacle avoidance. The controller 12 sends specific commands to the vehicle 10 to control movement of the vehicle. Controller 12 also receives 5 feedback from the vehicle 10. Communication with the controller 12 is provided through a gateway interface module or communication interface module (CIM) 14 on the vehicle 10. In an illustrated embodiment, the communication interface module is a Controller Area Network (CAN) module. CIM 14 packages information for transport between components.
[0037] A mode switch 16 coupled to module 14 permits a user to select between a manual 10 operation mode and the autonomous or remote control mode. In the manual mode, the vehicle 10 is operated by a driver in a normal manner (via operator action on vehicle devices such as a steering device, (such as handles, wheel, joystick), a brake pedal, a gear shift, an accelerator pedal, and an ignition switch (or a sensor that detects operation of any of the foregoing) that respectively cause operation of other vehicle devices, such as a steering device (such as a 15 steering tie arm), a brake actuator, an transmission shifter controller, a throttle, and an ignition relay (generally any vehicle device or actuators for operating such devices). Overall, it should be appreciated that for any operational input device, embodiments are envisioned that utilize physical connections and embodiments are envisioned where sensors are placed on input devices and operation of the devices is communicated via electrical signals. Likewise, embodiments are 20 envisioned where physical connections are used to drive action in actuators and embodiments are envisioned where actuators receive electrical signals that instruct their operation.
[0038] In one embodiment, the mode switch 16 is a physical switch. In other embodiments, the mode switch 16 is actuated in software using one of a manned and autonomous or remote user input. The communication interface module 14 controls a system on / off function 18 and an 25 ignition interrupt function 20. The communication interface module 14 also communicates with a display 22 within the vehicle 10. The display 22 is preferably a high resolution color display. The display 22 may also be provided by a vehicle gauge display.
[0039] Communication interface module 14 further communicates with an electronic power steering control 24. The power steering control 24 controls a steering position function 26 for 30 guiding the vehicle 10.
[0040] Communication interface module 14 further communicates with an engine control module (ECM) 28. The ECM 28 controls and responds to a pedal position function 30. ECM 28 2026204780 19 Jun 2026 further controls an engine start / stop function 32. The pedal position function 30 receives instruction from the network interface module 14 whether to accept actual position of the foot pedal or an acceleration command received from controller 12 for controlling the vehicle throttle position. For example, in manual mode the pedal position function 30 takes the physical 5 response from the pedal for throttle application, whereas in autonomous or remote mode the controller 12 provides a percentage of throttle that is to be applied in the same manner as the physical application of the throttle.
[0041] Communication interface module 14 further communicates with a vehicle control module 34. The vehicle control module 34 controls a transmission position function 36, a brake 10 position function 38, and a parking brake position function 40. Shifting of the vehicle is controlled by a driver during manual mode or by signals received from the controller 12 through communication interface module (CIM) 14 in the autonomous or remote control mode. The vehicle control module 34 also provides vehicle status and sensor information through communication interface module 14 back to the controller 12. The vehicle status and sensor 15 information includes, for example, vehicle speed, steering angle, requested speeds, requested steering angles, brake status, fuel level, accelerometer data, brake sensors, throttle position sensors, wheel speed sensors, gear selection sensors, temperature sensors, pressure sensors, emissions levels, trouble codes, error messages, or the like. The brake position function 38 is illustratively implemented using an i-Booster intelligent brake control available from Bosch. 20
[0042] Furthermore, in the event of interaction or conflicting messages between the ECM 28 pedal position function 30 and VCM 34 brake position function 38 the CIM 14 will filter the appropriate communication messages to pass to the external controller 12, thus avoiding interaction issues regarding the input or pedal positions.
[0043] The vehicle control module 34 controls the transmission position function 36 by 25 detecting a request to shift gears and then providing a shifting signal when conditions are right. Brake position function receives inputs from a pedal position detector and brake commands received over the communication interface module 14 to apply the vehicle brakes 38 or the parking brake 40.
[0044] Autonomous or remote controller 12 may also control suspension components 30 through the communication interface module 14. Vehicle sensors outputs are received and processed by controller 12 and signals are then sent from controller 12 through communication interface module 14 to control adjustable springs or adjustable shocks the vehicle suspension. 2026204780 19 Jun 2026 See, for example, U.S. Patent Application Publication No. 2014 / 0125018 and U.S. Application Serial No. 14 / 507,355, filed on October 6, 2014, the disclosures of which are expressly incorporated by reference herein for details of adjustable suspension components.
[0045] Fig. 2 illustrates an exemplary accessory integration device 50 having an accessory 5 CAN port 52 which communicates through a CAN bus 54 to an accessory hardware platform 56 of the vehicle 10. Specifically, the CAN bus 54 communicates with a hardware CAN transceiver 58. Transceiver 58 communicates with hardware platform firmware 62 of accessory software 60. The hardware platform firmware 62 communicates with CAN accessory application programming interface (API) software 64. The API software 64 communicates with third party 10 application software 66.
[0046] The CAN accessory API software 64 includes a compiled code library. The library provides an interface between a proprietary CAN network and an application programmer's application code. This allows a third party accessory creator to access specific and limited information on the CAN network, therefore enabling the creation of smart accessories, without 15 access to proprietary information of the CAN network, and without the ability to interfere with vehicle communications. Further, this interface does not allow for compromising the vehicles intended operation or network security.
[0047] In one embodiment, the compiled code library includes a set of proprietary, secure, and predefined function calls. The function calls include items such as getEngineRPM( ), 20 getVehicleSpeed( ), or getEngineTemperature( ), for example. The third party application programmer may use these function calls to bring the accessible vehicle information into their application code.
[0048] In one example, the code library may be compatible with large open source electronics platforms. In addition to the software library, a quick start custom accessory includes 25 a durable housing and hardware peripherals that the third party developer may use. The peripherals include, for example, an LED bar and a basic LCD display, etc.
[0049] The present disclosure permits any third party to create software applications for use with the vehicle without interfering with the other functionality of the vehicle. Therefore, third parties can develop smart accessories for use with the vehicle. This enables vehicle users to 30 drive innovation in vehicle accessories. Conflict Resolution 2026204780 19 Jun 2026
[0050] In one embodiment, when conflicts arise between individual or multiple manual inputs and input instructions received from the autonomous or remote controller 12 when the vehicle 10 is in the autonomous or remote control mode, the vehicle may respond with a manual override of autonomous control and the CIM 14 may continue to watch the remote input 5 messages without executing the instructions, while continuing to send CAN messages.
[0051] In another embodiment, a user is detected in the vehicle, i.e, via an input torque sensed on the steering wheel, therefore allowing manual operation to override specific or all functions of autonomy.
[0052] Another embodiment includes autonomous or remote controller 12 override of 10 manual control inputs to the vehicle. For example, messages may be detected from the controller 12 allowing for autonomous control to override specific or all functions of manned mode operation.
[0053] Some vehicles implement a switch to transition from autonomous or remote mode to manned mode. In some examples, the switch position will override the conflicting messages. 15 For example, if the switch is in autonomous mode, and messages are received from the vehicle pedals, the vehicle will continue to operate in autonomous mode. Brake-Throttle interactions in Autonomy
[0054] In some instances inputs may comprise manned and autonomy or remote messages 20 that are conflicting or occur simultaneously. For example, if commands are sensed for brake application and throttle application, the CIM 14 may be calibrated so that the brake application takes precedence. Furthermore, profiles may determine whether the pedal positions were intended actions. If the actions were unintended the vehicle may enter a lockout mode. Otherwise, the responses of the vehicle controls may be calibrated to pre-selected limits. 25
[0055] In another instance, the vehicle’s response may include a blended application of at least one of the manned and autonomous or remote inputs. For example, the CIM 14 may receive messages for throttle application and brake application. A blended response may reduce the throttle to a calibrated level low enough such that the vehicle brakes will overcome the throttle application to the engine. In other situations, alternative calibrations may be desired. 30 These calibrations comprise profiles that pre-select which vehicle features have priority in the event of conflicting messages 2026204780 19 Jun 2026
[0056] An exemplary vehicle system response of conflicting individual or multiple manual inputs and individual or multiple input instructions received from autonomous or remote controller 12 when the vehicle 10 is in the autonomous or remote control mode, may be as follows: 5 • Brakes: The vehicle 10 has both mechanical and electrical brake controls. If conflicts occur between the brake pedal input and the brake request command from the controller 12, an override causes the strongest braking request (manned or autonomous / remote) to be implemented. Therefore, an occupant in the vehicle may use the brakes to override remote commands to stop the vehicle 10. 10 • Steering: the steering will not respond to manual input. • Transmission: the transmission will not respond to manual input. • Engine: the accelerator pedal will be non-responsive to manual input. Lockout Mode
[0057] A lockout function of the present disclosure is implemented in a vehicle 10 which 15 supports both manned and autonomous or remote modes. In manned mode, the vehicle operates normally, receiving inputs from a driver through pedals, a steering wheel, and a shift lever. In remote mode, the vehicle 10 operates by receiving commends from an external controller 12 which communicates through a gateway communication interface module 14 which conditions and translates the commands onto the vehicle’s CAN network. The lockout function permits 20 only approved third parties to send commands via the vehicle gateway in remote control or autonomous mode. The vehicle 10 behaves in a known way in the event of the loss of or corruption of communication between the vehicle gateway 14 and the external controller 12.
[0058] The lockout function is illustratively part of the software which allows a third party to communicate with and drive a vehicle via controller 12 and interface module 14. In lockout 25 mode the vehicle operations may comprise coming to a controlled stop, shifting into park, shutting off the engine, locking the steering column / brakes / clutch, shutting off the display / suspending communications, shut off power to the vehicle, inhibit starting of the vehicle. In order to insure only approved third parties are accessing the gateway module 14, the third party’s external controller must successfully complete an authentication sequence. In an 30 illustrated embodiment, authentication is based on a J1939 seed key exchange. It is understood that other authentication techniques may also be used. Another embodiment authentication 2026204780 19 Jun 2026 protocol is described below with respect to Fig. 5. Entering lockout mode
[0059] In order to insure only approved third parties are accessing the gateway module 12 in remote mode the third party’s external controller 12 must successfully complete an 5 authentication sequence. In one illustrated example, an authentication sequence is based on the J1939 or other seed key exchange. If an authentication sequence is not initiated and completed successfully at least once every five minutes, for example, then the vehicle enters lockout mode. Additionally, if the integrity of the communication, which may be ensured using checksums, message counters, or other communication errors, in any message coming from the external 10 module to the vehicle gateway is compromised the vehicle enters the lockout mode. Controlling the vehicle to execute lockout mode
[0060] The gateway control module 14 executes lockout mode by ignoring any incoming CAN message from the external controller 12. Then module 14 sends a throttle command of zero over the vehicles internal CAN network and begins to command breaks to stop the vehicle 15 10. The braking force used is determined by a calibratable map which is dependent on vehicle speed and steering angle. Once the vehicle has stopped moving the transmission is commanded to shift into park and the engine is turned off. The gateway module 14 ignores incoming messages from external controllers 12, keeps the engine off, the transmission in park, and the brakes depressed until lockout mode is exited. 20 Exiting lockout mode
[0061] Exiting the lockout mode may occur by reauthentication, reestablishing communication, by a manual key cycle, etc. In one embodiment, the lockout mode is exited once the vehicle 10 has come to a complete controlled stop, the engine is shut off, and the 25 transmission is shifted into park. In another embodiment, the lockout mode may be exited during the shutdown sequence (i.e. before a complete controlled stop has occurred, before the engine is shut off, or before the transmission is shifted into park) if reauthentication or reestablished communication occurs during the shutdown sequence. If the lockout was caused by loss of or corrupt communication, then lockout mode is exited once communication has been 30 reestablished. If lockout mode was caused by a failure to authenticate, lockout mode is exited once an authentication sequence completes successfully. If the conditions to exit lockout mode 2026204780 19 Jun 2026 are satisfied while the vehicle is in the process of stopping, shutting down the engine, and parking, the lockout mode is exited once the vehicle has come to a complete stop, shutdown the engine, and shifted into park.
[0062] Further details of the normal operation in the autonomous or remote control mode 5 and the lockout mode are illustrated in Fig. 3. During normal operation, as illustrated at block 70, autonomous or remote controller 12 sends drive requests to the communication interface module or gateway interface module 14. The interface module 14 sends vehicle status information to controller 12. Module 14 also sends drive commands to vehicle communication nodes (such as CAN, Ethernet, etc.) based on the drive requests received from controller 12 as 10 discussed above. Vehicle nodes send status information to the interface module 14.
[0063] Next, the communication interface module 14 determines whether the autonomous or remote controller 12 has initiated and successfully completed an authentication, such as, for example, a seed key exchange as illustrated at block 72. If authentication was successfully completed at block 72, module 14 resets an authentication timer at block 74 and continues with 15 normal operation at block 70. If authentication was not successfully completed at block 72, module 14 determines whether a predetermined period of time, such as 5 minutes, has elapsed since the last successful authentication, as illustrated at block 76. If the predetermined amount of time has not elapsed at block 76, normal operation continues at block 70. If the predetermined amount of time has elapsed at block 76, module 14 enters a lockout mode at block 78. 20
[0064] Module 14 sends drive commands to the vehicle modes to bring the vehicle to a lockout state in a controlled manner as illustrated at block 78. Module 14 controls braking of the vehicle based upon speed and steering angle of the vehicle to bring the vehicle to a controlled stop. Engine control module 28 then shuts off the engine function at block 32. In the lockout mode, controller 12 may continue sending drive requests to the communication interface module 25 14. The interface module 14 continues to send vehicle status information to the controller 12. Interface module 14 sends drive commands to the vehicle nodes in order to maintain lockout of the vehicle. The vehicle nodes send status information back to the interface module 14.
[0065] In another illustrated embodiment, communications form controller 12 to the vehicle CIM 14 still occurs regardless of the vehicle being in lockout mode. After a predetermined 30 number of failed authentication attempts or a failure in communication, the CIM 14 stops executing commands to the vehicle. Vehicle CIM 14 will still be receive communications from controller 12, but will no longer send communications to controller 12. 2026204780 19 Jun 2026
[0066] In yet another illustrated embodiment, when the vehicle 10 enters lockout mode, the entire vehicle communication network is still functional while the external communication network between controller 12 and CIM 14 is shut down.
[0067] In still another illustrated embodiment, active control is provided for individual 5 vehicle nodes of the vehicle communications network. Lockout authentication is applied between any two vehicle nodes or vehicle communications networks to implement lockout functionality. This technique is also be used to prevent an unauthorized vehicle node from being added to the CAN network.
[0068] Next, the interface module 14 determines whether the controller 12 has initiated and 10 successfully completed an authentication, such as by a seed key exchange, as illustrated at block 82. If not, interface module 14 maintains the lockout mode at block 80. If the authentication was successful at block 82, interface module 14 resets the authentication timer at block 74 and resumes normal operation in which the vehicle is again controlled by the autonomous or remote controller 12. 15
[0069] When the vehicle 10 is in autonomous or remote control mode, communications failures may occur. In the event of a communications failure, including problems with a message counter and checksum as well as if any J1939 defined “error” messages, the communication interface module 14 enter the lockout mode discussed above. If the remote module commands the brakes at greater than 0% and the throttle at greater than 0%, the 20 communication interface module 14 obeys the brake command, ignores the throttle command, and broadcasts a diagnostic trouble code over the external CAN network. The following are exemplary actions taken by the communication interface module 14 in the event a J1939 “not available” message is received for each subsystem controlled in remote mode. In one example: • Brakes: brake command interpreted as 0% 25 • Steering: steering angle maintained at last valid requested angle • Transmission: requested gear maintained at last valid requested gear • Engine: pedal command interpreted as 0%, engine on / off command interpreted as engine off
[0070] In one illustrated example, if the CIM 14 receives a brake command and the data 30 says the command is not available, the CIM 14 determines that the command is invalid and waits to see if it receives another message. Limit the number of messages, before a lockout or alternative operation takes place. If multiple input commands (brakes, steering, etc.) are not 2026204780 19 Jun 2026 valid, this could signal a problem and the CIM 14 enters lockout mode to stop these commands from continuing. The CIM 14 may enable options for any pedal commands, any steering commands, pre-set “limp-home” commands, etc. If problems occur with check sum or data errors, then the CIM 14 uses use last valid commands, however, if the conditions are still not 5 valid vehicle will eventually enter a lockout mode or limp home / degrade mode condition. Remote Vehicle Power Up and Remote Mode Selection
[0071] In another embodiment, the system permits remote mode selection and vehicle power up remotely. The communication interface module 14 has a low power mode which 10 wakes when a CAN message is received from controller 12. The mode selection is controlled by a CAN message from the remote controller 12 (if not present default to manual mode). Once woken up, the communication interface module 14 controls the circuit in Fig. 4 in order to bypass the key switch if in remote mode. A conventional wiring harness is modified by adding an inline connector behind the key switch connector as shown in Fig. 4. An auto start control 15 line for the ECM 28 is routed to a 5 pin connector with existing key switch lines. Fig. 4 also shows both sides of a new pass through connector with an auto / manual bypass circuit inbetween.
[0072] If communication is lost in autonomous or remote control mode while the vehicle 10 is in motion, a "stop procedure" is implemented. The system monitors ground based vehicle 20 speed and steering angle then applies the brakes based on these two inputs to bring the vehicle to a stop. Applications based on a 3D map calibrated to the vehicle (speed, steering angle and brakes percentage) may be used to provide feedback of the surrounding terrain.
[0073] In illustrative embodiments, the controller 12 implements one or more of the following features: 25 • Vehicle supervisory control to the level of emulating a human driver • Sensory fusion • Navigation by GPS corrected inertial navigation or other system capable of required precision in determining position • Localization 30 • Lane detection and lane departure • Extensive terrain and obstacle detection, avoidance and database characterization using real-time or near real-time detection, pre-recorded maps and lane structures, trips planned 2026204780 19 Jun 2026 and tracked, collision avoidance system (LIDAR, Video, sensors), and adaptive cruise control. • In the absence of communications from a controller 12, the vehicle has the ability to operate in a full autonomous mode. 5
[0074] The communication interface module 14 may provide: • Run / Auto Start, Speed / Acceleration Control, Steering, Braking, Gear select, and other chassis functions such as lighting • Yaw rate models vs. steering command are used at the vehicle control level • Command modes include target condition and rate with standard and maximum rate of 10 change profiles • Remote dashboard messages. • Creating drive profiles from vehicle sensors • Black out mode • Infrared (IR) mode 15 • Automating driveline control, by executing drive modes including 2 wheel drive, 4 wheel drive and turf mode, etc. • Status messages sent over the CAN include controller conflicting commands, vehicle health data, and state and conditions of vehicle lockout mode. 20
[0075] Still further, embodiments are envisioned where the vehicle 10 (and controller 34) is provided with information regarding the terrain being traversed (via GPS or otherwise, alone or in combination with other sources). This information can include the type of terrain, changes in terrain, or otherwise to inform the vehicle 10 about conditions expected to impact operation thereof. Vehicle 10 then uses this information to impact the operation of the vehicle. In one 25 example, vehicle 10 is determined to be travelling in a cross-hill direction. Vehicle 10 uses this information to impact the stiffness settings of the electrically adjustable shocks to increase vehicle stability. Similarly, other examples include adjusting shock settings by determining whether an on-road or off-road setting is being traversed.
[0076] With reference to Fig. 5, another embodiment authentication protocol is described to 30 ensure only authorized entities are able to access the CAN network to direct operation of the vehicle. Upon enabling autonomous mode, the CIM 14 sends an authentication request to the remote module 12, block 500. The request contains a seed value. The seed value is illustratively 2026204780 19 Jun 2026 a 7-byte long key that is generated to approximate a random number. Remote module 12 receives the request and calculates a key based on the seed value (a private key) and an algorithm, block 510. Module 12 then sends back a public key value to CIM 14, block 520. CIM 14 then compares the returned value to a value it calculated internally and therefore expects 5 to match the returned value to indicate an authentic module 12. Upon receiving the public key value, CIM 14 determines if the response was received within a defined timing window, block 530. This timing requirement limits the ability of a third party to have unlimited time to attempt any number of responses (i.e. a “brute force” hack attempt). If the public key response was received within the required timing window and the public key matches the expected response, 10 block 540, then the module is authenticated and module 12 is permitted to transmit control signals, block 550.
[0077] If the public key received within the timing window does not match or if the public key response was received outside of the required window, CIM 14 locks out module 12 and enters a lockout mode (which either disables the vehicle or returns it to manual user control), 15 block 560.
[0078] CIM 14 then waits for another authentication request from module 12 (which may be the same or different module 12 that provided the failed public key response), block 570. Upon receiving another authentication request, CIM 14 enforces a delay to again reduce the likelihood of success for a brute-force type attack, block 580. If the delay time has not elapsed, CIM 14 20 again locks out module 12 and then waits for another authentication request, block 590. If the delay time has elapsed, then CIM 14 returns to block 510 to again attempt to authenticate module 12.
[0079] As noted, once a module 12 is authenticated, it is permitted to transmit commands to CIM module 14 for instructing operation of vehicle 10. As part of this, CIM 14 receives an input 25 command from module 12, block 600. Each received message has a checksum and message counter value attached thereto. CIM 14 compares the checksum and counter within the message to what is internally calculated (and therefore expected from the message), blocks 610, 620, 630. If either the counter or checksum do not match, CIM 14 locks out module 12, block 560. If the counter and checksum match, then the received command input is accepted and distributed 30 within vehicle 10 to achieve invocation thereof, block 640.
[0080] Overall, with reference to Fig. 6, it should be appreciated that a method allowing ready connection of a vehicle with an autonomous controller disclosed. A vehicle is provided 2026204780 19 Jun 2026 with a communication network having a plurality of vehicle operation devices coupled thereto, the plurality of vehicle operation devices being capable of operating the vehicle, the plurality of vehicle operation devices including a first subset of devices that operate based upon instructions from a vehicle control unit, the plurality of vehicle operation devices including a second subset 5 of devices that provide input to the vehicle control unit, the input being indicative of operator interaction with one or more of the vehicle devices, block 700. An interface to the communication network is provided, block 710. Input is received via the interface from an autonomous vehicle controller, thereby allowing the autonomous vehicle controller to control the first subset of vehicle devices independent of input from the second subset of vehicle devices, 10 block 720.
[0081] The logical operations of the various embodiments of the disclosure described herein are implemented as: (1) a sequence of computer implemented steps, operations, or procedures running on a programmable circuit within a computer, and / or (2) a sequence of computer implemented steps, operations, or procedures running on a programmable circuit within a 15 directory system, database, or compiler.
[0082] Embodiments of the disclosure may be practiced using various types of electrical circuits comprising discrete electronic elements, packaged or integrated electronic chips containing logic gates, a circuit utilizing a microprocessor, or on a single chip containing electronic elements or microprocessors. Embodiments of the disclosure may also be practiced 20 using other technologies capable of performing logical operations such as, for example, AND, OR, and NOT, including but not limited to mechanical, optical, fluidic, and quantum technologies. In addition, aspects of the methods described herein can be practiced within a general purpose computer or in any other circuits or systems.
[0083] Embodiments of the present disclosure are implemented as a computer process 25 (method), a computing system, or as an article of manufacture, such as a computer program product or computer readable media. The computer program product may be a computer storage media readable by a computer system and encoding a computer program of instructions for executing a computer process. Accordingly, embodiments of the present disclosure may be embodied in hardware and / or in software (including firmware, resident software, micro-code, 30 etc.). In other words, embodiments of the present disclosure may take the form of a computer program product on a computer-usable or computer-readable storage medium having computer-usable or computer-readable program code embodied in the medium for use by or in connection 2026204780 19 Jun 2026 with an instruction execution system. A computer-usable or computer-readable medium includes any medium that includes media capable of containing or storing the program for use by or in connection with the instruction execution system, apparatus, or device.
[0084] Embodiments of the present disclosure, for example, are described above with 5 reference to block diagrams and / or operational illustrations of methods, systems, and computer program products according to embodiments of the disclosure. The functions / acts noted in the blocks may occur out of the order as shown in any flowchart. For example, two blocks shown in succession may in fact be executed substantially concurrently or the blocks may sometimes be executed in the reverse order, depending upon the functionality / acts involved. 10
Claims
1. A vehicle, comprising:a communication interface communicatively coupled to a vehicle controller and a remote5 controller, the communication interface configured to receive commands from the remote controller and send the received commands to the vehicle controller, wherein the vehicle controller is configured to control the vehicle in three modes, including a remote operating mode in response to the commands received from the remote controller via the communication interface, an autonomous operating mode in an absence of the commands from the remote10 controller, and a manual operating mode;an engine control module communicatively coupled to the vehicle controller and configured to control a vehicle engine start, a vehicle engine stop, and a vehicle throttle position, wherein the vehicle throttle position corresponds to a vehicle pedal position, an acceleration command received from the remote controller, or a combination thereof; and15 a wiring harness configured to provide by-wire override control of the vehicle to controlthe vehicle, wherein the communications interface is operatively coupled to the wiring harness.
2. The vehicle of claim 1, wherein the wiring harness comprises an inline connector positioned between a vehicle key switch connector and a vehicle wiring to provide a pass-20 through connection in the remote operating mode.
3. The vehicle of claim 2, wherein the wiring harness further comprises an auto / manual bypass circuit configured, in the remote operating mode, to bypass a key switch signal path and to provide an electronically controlled ignition signal path to the engine control module to25 control a vehicle engine start and a vehicle engine stop.
4. The vehicle of claim 3, wherein the auto / manual bypass circuit comprises a first electrically controllable switching element configured to switch between a first input signal and a second input signal to provide an output signal used to control the vehicle engine start and the30 vehicle engine stop.2026204780 19 Jun 20265. The vehicle of claim 4, wherein the first electrically controllable switching element is configured to receive the first input signal from the communication interface and the second input signal from an unswitched (UNSW) power source.5 6. The vehicle of claim 5, wherein the output signal is provided as an input signal into asecond electrically controllable switching element, wherein the second electrically controllable switching element comprises a default open switch that receives the input signal, and wherein the second electrically controllable switching element is configured to selectively bypass an auto / manual mechanical key switch to provide for the electronically controlled ignition signal.
107. The vehicle of claim 6, comprising a third electrically controllable switching element and a fourth electrically controllable switching element, wherein the third electrically controllable switching element is configured to receive a crank input signal and to actuate a switch based on the crank input signal to provide a brake switch signal to the fourth electrically controllable15 switching element.
8. The vehicle of claim 7, wherein the fourth electrically controllable switching element is configured to provide the brake switch signal as a crank output signal into a starter motor to control the vehicle engine start.
209. The vehicle of any one of claims 1 to 8, wherein the vehicle controller is further configured to initiate a vehicle stop procedure if external communication with the vehicle is lost when operating in the remote operating mode.25 10. The vehicle of claim 9, wherein the stop procedure comprises automatically applying oneor more brakes included in the vehicle based on a monitoring of a ground-based speed of the vehicle, a monitoring of a steering angle of the vehicle, or a combination thereof.
11. The vehicle of any one of claims 1 to 10, comprising the remote controller being30 configured to transmit the commands to the communication interface.2026204780 19 Jun 202612. The vehicle of claim 11, wherein the communication interface comprises a controller area network (CAN) module communicatively coupled to an accessory hardware platform included in the vehicle via a CAN bus, and wherein the CAN module is configured to transmit and receive a message to the accessory hardware platform via the CAN bus.
513. The vehicle of claim 12, wherein the accessory hardware platform comprises a smart accessory hardware controlled via a third-party application software.
14. The vehicle of claim 13, wherein the third-party application software communicates with 10 a CAN accessory application programming interface (API) software to control the smart accessory hardware.
15. The vehicle of claim 12, wherein the remote controller is authenticated via a seed key exchange.1516. A method of operating a vehicle, comprising:receiving, via a communications interface of the vehicle, commands from a remote controller device;sending, via the communications interface, the commands to a vehicle controller of the20 vehicle, wherein the vehicle controller is configured to operate in three modes comprising a remote operating mode in response to the commands received from the remote controller via the communication interface, an autonomous operating mode in an absence of the commands from the remote controller, and a manual operating mode;controlling, via an engine control module communicatively coupled to the vehicle25 controller, a vehicle engine start, a vehicle engine stop, and a vehicle throttle position, wherein the vehicle throttle position corresponds to a vehicle pedal position, an acceleration command received from the remote controller, or a combination thereof; andproviding, via a wiring harness of the vehicle, by-wire override control of the vehicle to control the vehicle, wherein the communications interface is operatively coupled to the wiring 30 harness.2026204780 19 Jun 202617. The method of claim 16, wherein the wiring harness comprises an inline connector positioned between a vehicle key switch connector and a vehicle wiring to provide a passthrough connection in the remote operating mode.5 18. The method of claim 17, wherein the wiring harness further comprises an auto / manualbypass circuit configured, in the remote operating mode, to bypass a key switch signal path and to provide an electronically controlled ignition signal path to the engine control module to control a vehicle engine start and a vehicle engine stop.10 19. A non-transitory computer-readable medium comprising encoded instructions that, whenexecuted by one or more processors of a vehicle, cause the one or more processors to:receive, via a communications interface of the vehicle, commands from a remote controller device;send, via the communications interface, the commands to a vehicle controller of the15 vehicle, wherein the vehicle controller is configured to operate in three modes comprising a remote operating mode in response to the commands received from the remote controller via the communication interface, an autonomous operating mode in an absence of the commands from the remote controller, and a manual operating mode;control, via an engine control module communicatively coupled to the vehicle controller, 20 a vehicle engine start, a vehicle engine stop, and a vehicle throttle position, wherein the vehicle throttle position corresponds to a vehicle pedal position, an acceleration command received from the remote controller, or a combination thereof; andprovide, via a wiring harness of the vehicle, by-wire override control of the vehicle to control the vehicle, wherein the communications interface is operatively coupled to the wiring 25 harness.
20. The non-transitory computer-readable medium of claim 19, wherein the wiring harness comprises an inline connector positioned between a vehicle key switch connector and a vehicle wiring to provide a pass-through connection in the remote operating mode, and wherein the30 wiring harness further comprises an auto / manual bypass circuit configured, in the remote operating mode, to bypass a key switch signal path and to provide an electronically controlled2026204780 19 Jun 2026ignition signal path to the engine control module to control a vehicle engine start and a vehicle engine stop.
21. An accessory device for a vehicle, comprising:5 a transceiver configured to communicate via a communication network of the vehicle;a processor communicatively coupled to the transceiver; andmemory storing instructions that, when executed by the processor, cause the accessorydevice to perform a set of operations, the set of operations comprising:receiving, via the transceiver, a proprietary message from the communication10 network of the vehicle;generating, based on a software library associated with the vehicle, a translated message corresponding to the received proprietary message; andproviding an indication of the translated message to a software application that includes the software library.1522. A vehicle, comprising:a plurality of ground engaging members;a motor coupled to the plurality of ground engaging members, the motor configured to drive the plurality of ground engaging members;20 a communication interface configured to communicate with a controller that is remotefrom the vehicle, the communication interface configured to receive one or more commands from the controller; anda vehicle control unit coupled to the communication interface and configured to:in an autonomous control mode of operation:25 provide, via the communication interface, an indication of an operatingcondition of the vehicle;receive, via the communication interface, a first command corresponding to the indicated operating condition; andcontrol operation of the vehicle based on the first command; and30 in a remote control mode of operation:receive, via the communication interface, a second command corresponding to user input received from a vehicle operator; and2026204780 19 Jun 2026control operation of the vehicle based on the second command.
23. A vehicle, comprising:a plurality of ground engaging members;5 a motor coupled to the plurality of ground engaging members, the motor configured todrive the plurality of ground engaging members;a communication interface configured to communicate with a controller that is remote from the vehicle, the communication interface configured to receive one or more commands from the controller; and10 a vehicle control unit coupled to the communication interface and configured to:receive, from the controller via the communication interface, a command; control operation of the vehicle based on the received command; and based on a determined absence of communication with the controller, enable autonomous control of the vehicle.1524. A vehicle including:a communication network having a plurality of vehicle devices coupled thereto;a vehicle control unit coupled to the communication network and able to control a first subset of the plurality of devices via the communication network to effect vehicle operation, the20 vehicle control unit operable to receive input from a second subset of the vehicle devices via the network and to control the first subset of the plurality of devices responsive to the input received from the second subset of vehicle devices, input from the second subset of vehicle devices being indicative of operator interaction with one or more of the vehicle devices; anda network interface operable to couple to an autonomous vehicle controller such that the25 autonomous vehicle controller is able to effect vehicle operation via the first subset of vehicle devices independent of input from the second subset of vehicle devices.
25. A method of providing autonomous vehicle operation including:• providing a vehicle with a communication network having a plurality of vehicle operation 30 devices coupled thereto, the plurality of vehicle operation devices being capable ofoperating the vehicle, the plurality of vehicle operation devices including a first subset of devices that operate based upon instructions from a vehicle control unit, the plurality of2026204780 19 Jun 2026vehicle operation devices including a second subset of devices that provide input to the vehicle control unit, the input being indicative of operator interaction with one or more of the vehicle devices;• providing an interface to the communication network; and5 • receiving, via the interface, input from an autonomous vehicle controller, therebyallowing the autonomous vehicle controller to control the first subset of vehicle devices independent of input from the second subset of vehicle devices.