Method for protecting an autonomously operated passenger car from an intervention by a passenger

Abstract

The invention relates to a method for protecting an autonomously operated passenger car (1) from an intervention (50) by a passenger, in which method: a potentially imminent intervention (40) and / or an actually occurring intervention (50) in a driver operating element (24) of the passenger car (1) is identified by means of at least one electromagnetic sensor (32) and / or at least one mechanical sensor (34); a safety level (S1-S4) is assigned to the identified potentially imminent and / or actually occurring intervention (40, 50); and, in accordance with the safety level (S1-S4), a corresponding interaction with the passenger takes place and / or a driving maneuver (M) of the passenger car (1) is automatically controlled, in which at least one driving speed is slowed down.

Description

[0001] Description

[0002] Methods for protecting an autonomously operated passenger car from interference by a passenger

[0003] The invention relates to a method for protecting an autonomously operated passenger car from interference by a passenger.

[0004] As ferry operations become increasingly automated, the model of so-called autonomous taxis is also gaining in importance. Since the highest level of automation—namely, fully autonomous ferry operation without any intervention from a human driver (and also without the need for monitoring by one; so-called Level 5)—is not yet fully developed for particularly complex traffic situations and is therefore not yet widely approved, autonomous taxis can fill this gap.

[0005] In traffic areas where fully autonomous operation is permitted, an investment in a suitably equipped vehicle will pay off with increasing vehicle usage (per unit of time). This primarily benefits vehicles used as taxis or for comparable services such as ride-hailing or ride-pooling – vehicles (including minibuses, etc.) that can be booked by passengers for individual trips (as opposed to private vehicles, which are only used by the owner and possibly their family members). During ongoing autonomous operation within the already permitted traffic areas, the autonomously operated vehicles can collect further data on traffic situations. This data can later be used to train AI systems for recognizing traffic situations, which in turn could lead to a possible expansion of the permitted operating conditions in the medium term.

[0006] For manufacturers of vehicles designed for autonomous operation, or intended to be upgraded for such operation, a corresponding division of the vehicle fleet into "private vehicles" and "taxi vehicles" (in the aforementioned sense; this also includes comparable transport services) is simply unprofitable. Therefore, the manufacturers' standard models are used for the aforementioned taxi service; these are primarily used as "individual vehicles" (i.e., vehicles used by the owner or keeper, such as private or company cars). However, for autonomous operation of such standard models, it must be considered that the controls intended for the driver are also accessible to passengers during taxi operation (i.e., when passengers are booked for a single ride). This potentially poses the risk that the vehicle's controls could be unintentionally operated by a passenger.While this is generally undesirable, the impact on driving safety can vary depending on the type of control involved. Accidentally activating a turn signal, for example, might confuse other road users but doesn't directly affect the vehicle's movement. However, tampering with a mechanical steering wheel (i.e., a steering wheel with a mechanical connection to the axle being steered, as opposed to "steer-by-wire") can directly change the direction of travel and thus potentially lead to a collision, making the potential danger far more critical.

[0007] However, since complete physical covering or blocking of the driver's controls is not permitted everywhere under licensing regulations, and the controls must therefore remain accessible at least in principle for the relevant regions (such as the USA), the protection of the controls from interference by passengers in autonomous taxi operations must be ensured in other ways. Here again, it is generally uneconomical for manufacturers to develop and / or produce regionally differentiated vehicle fleet configurations (i.e., with or without mechanical covering of the controls).

[0008] The invention is therefore based on the objective of providing a method by which an autonomously operated passenger vehicle can be protected as safely and efficiently as possible from unwanted interference with the driver's controls, while still allowing the most trouble-free ferry operation possible.

[0009] The aforementioned problem is solved according to the invention by a method for protecting an autonomously operated passenger car from interference by a passenger, wherein a potentially imminent interference and / or an actual interference with a driver control element of the passenger car is detected by means of at least one electromagnetic sensor and / or at least one mechanical sensor, wherein a security level is assigned to the detected imminent and / or actual interference, and wherein, depending on the security level, a corresponding interaction with the passenger takes place and / or a driving maneuver of the passenger car is automatically controlled, in which at least one driving speed is reduced. Advantageous and partly inventive embodiments are the subject of the dependent claims and the following description.

[0010] For the purposes of this text, a passenger car (PC) is defined as any motor vehicle designed to transport a number of people, with each passenger having their own seat, preferably equipped with a corresponding seat belt. The term "PC" as used here encompasses all common regulatory definitions. In particular, such a definition limits the number of people to be transported (including the driver) to twelve, preferably a maximum of nine. The PC can have any type of drive system, including, but not limited to, an internal combustion engine, a purely battery-electric drive, or a hybrid drive (possibly a "plug-in" system). Specifically, the PC can be a sedan, station wagon, van, or minibus.

[0011] An autonomously operated car is understood in particular to mean that the car is equipped with traffic sensors that detect the traffic situations surrounding the car (i.e., road layout, traffic signs, other vehicles and other road users and their movements, other obstacles, etc.) and, through a corresponding evaluation of the traffic situation, automatically generates control commands in response to these to control at least those actuators of the car that directly control and regulate the driving movement of the car (i.e., in particular, automatic control of acceleration, braking and steering behavior as well as associated light switching based on the data collected and evaluated by the traffic sensors).In this context, a procedure for the protection of an autonomously operated passenger car is to be understood in particular as meaning that the passenger car, which is basically equipped for autonomous operation, is actually in autonomous operation for the purposes of the procedure, and the procedure preferably takes effect in this state.

[0012] The term "at least one electromagnetic sensor" encompasses any sensor based on an electromagnetic measurement principle and thus designed and configured for detecting electromagnetic waves within a specific wavelength or frequency range. These electromagnetic waves can be detected, in particular, in the radar frequency range (radar sensor), the infrared (IR) range (IR sensor), or the visible range (optical sensor, e.g., camera). To detect the electromagnetic waves, the sensor can emit a corresponding wave and detect its reflection in space (as with a radar sensor), or passively detect the emission of radiation by objects in the environment (such as an IR sensor) or reflections of ambient light (such as a camera). Preferably, the car has multiple electromagnetic sensors, which, in particular, monitor its interior.In particular, individual electromagnetic sensors can operate in different frequency ranges (e.g., one or more cameras in combination with one or more radar sensors, etc.).

[0013] The term "at least one mechanical sensor" here encompasses any sensor based on a mechanical measuring principle, and specifically designed and configured to detect mechanical pressure, mechanical force, and / or contact. In particular, depending on the design, the driver controls of the vehicle itself may also include one or more such mechanical sensors to register driver activity and subsequently trigger the corresponding change in driving motion, lighting system, etc.

[0014] The term "driver control element" in this context refers to those controls intended for exclusive operation by the driver (and specifically designed for this purpose). Driver control elements preferably include those that have a traffic-related effect on the vehicle, such as controls for directly controlling driving motion, like the accelerator, brake, or gearshift levers, or steering wheel, but also, in particular, (high-beam) headlight switches or turn signals. Depending on the specific design of the method, the definition of driver control elements may also include windshield wiper levers and / or (especially in the driver's seat area) power window switches.

[0015] A potentially imminent interference with a driver's control element includes, in particular, any situation detected in the passenger compartment in which a passenger has not yet interfered with a driver's control element, but could do so with a not insignificant probability, for example, as a result of a passenger leaving their designated seat. Accordingly, there is no potentially imminent interference with a driver's control element in a passenger compartment with only properly seated passengers. An actual interference with a driver's control element includes, in particular, any touching or other actuation of the driver's control element by a passenger. A passenger, in this context, is understood to mean, in particular, a passenger in the passenger compartment who is not scheduled to be in the driver's seat during the journey.The assigned seat can be booked, particularly for commercial passenger transport (taxi service, etc.), via a booking portal, where the passenger is assigned a specific passenger seat (not the driver's seat). Specifically, in autonomous operation of the vehicle, the driver's seat is intentionally unoccupied; that is, in commercial passenger transport, the driver's seat cannot be booked by passengers.

[0016] Each potentially imminent and / or actually occurring intervention is assigned a respective, preferably predefined, security level, whereby the security level may in particular depend on the degree of probability of the potentially imminent intervention or on the effect of the actually occurring intervention on the driving movement of the car.

[0017] Depending on the assigned safety level, an action can now be taken to prevent the potentially imminent interference and / or to reduce the impact of an actual interference with a driver control element. Such an action preferably consists of interacting with the passenger, in particular to warn them of the potentially imminent interference in order to influence their behavior accordingly, or establishing a connection to a remote assistance system, e.g., a service center (provided, for example, by the passenger transport operator), through which a service center operator contacts the passenger. Such an action may also preferably consist of an automatically controlled driving maneuver designed to minimize potential risks from interference with a driver control element, at least by reducing the vehicle's speed.

[0018] The assignment can also be made implicitly, in particular, by assigning different actions to the potentially imminent and the actual intervention in the driver control element (as well as, if applicable, to the respective above-mentioned sub-cases such as different probability of intervention or different impact on a driving movement), thereby implicitly defining the respective safety levels (i.e., through the respective criterion and the associated consequence).

[0019] The proposed method makes it possible, especially for an autonomously operated car without a driver (i.e., in which the driver's seat is not occupied), to detect and differentiate between situations of varying criticality with regard to an intervention in a driver control element and to take actions according to these differences to avoid such an intervention or to minimize its consequences.

[0020] Preferably, a seatbelt buckle detection system, acting as a mechanical sensor, is used to detect whether a seatbelt is fastened on a passenger seat, and / or a weight sensor, also acting as a mechanical sensor, and / or a directed electromagnetic person detection system is used to detect whether a person is sitting in a passenger seat, thereby detecting at least a potentially imminent interference with a control element of the passenger vehicle. The directed electromagnetic person detection system can, in particular, comprise a camera and associated image recognition, and / or a radar sensor, which is preferably configured for detecting the presence of persons. Based on the aforementioned criteria, it can be determined, in particular, whether each passenger seat that must be occupied according to a booking is also properly occupied by the corresponding passenger (i.e., whether each passenger is properly seated in their passenger seat), or whether, if applicable,If a passenger is not seated correctly, this could a priori increase the likelihood of intervention. Therefore, a flexible response to each situation is possible.

[0021] Ideally, a potentially imminent intervention from an improperly used passenger seat is detected by a seatbelt buckle showing as closed on a seat that is unexpectedly unoccupied, or by a seatbelt buckle showing as open on a seat that is occupied, and / or by a potentially imminent intervention from an unexpectedly vacated passenger seat showing a seatbelt buckle showing as open on a seat that is unexpectedly unoccupied. A passenger seat may therefore be considered improperly used if a passenger leaves their seat while wearing a fastened seatbelt (and pulling it out), for example, by bending down or partially standing up inside the vehicle, or if they unfasten the seatbelt while seated. Initially, this may be considered a temporary situation that will not immediately lead to an intervention.Only when the passenger leaves their designated seat with the seatbelt open is there an unplanned unoccupied passenger seat, which increases the likelihood of interference, even unintentional interference by the passenger, with a driver control element.

[0022] Accordingly, a first security level is preferably assigned to a potentially imminent intervention originating from an improperly used passenger seat, and / or a second security level is assigned to a potentially imminent intervention originating from a passenger seat that has been unexpectedly vacated. Preferably, the second security level is considered a stricter security level or a more "serious" situation than the first security level, which is particularly preferably reflected in the corresponding actions taken by the procedure at each security level.

[0023] It is further advantageous if, at least for the detected potentially imminent intervention, the corresponding interaction with the passenger occurs via an automatic acoustic and / or visual warning and / or by means of a connection to a remote assistance system. The acoustic warning can include a corresponding message (e.g., recorded) which is played into the passenger compartment via the speakers of an audio system. Additionally or alternatively, the acoustic warning can include an alarm tone. The visual warning can include, for example, a flashing warning light or a text display of a corresponding warning message on a screen in the vehicle (such as a central display in the center console, etc.).

[0024] Via the remote assistance connection, an employee of a service center or similar organization, preferably provided by the operator in the case of commercial passenger transport, can directly contact the passenger in question and alert them to the potentially imminent interference with a driver's control element caused by the improper use or unplanned abandonment of the passenger seat. Preferably, at a certain safety level, the corresponding audible and / or visual warning can first be issued to the passenger. After a short waiting period of 3 to 10 seconds, preferably 5 to 8 seconds, the connection to the remote assistance system can be established if no changes have occurred during the waiting period that would necessitate an improvement in the safety level.

[0025] In a further advantageous embodiment, at least in the second safety level, a driving maneuver of the car is automatically initiated, during which the vehicle speed is reduced. In particular, the journey can also be terminated at the nearest safe stopping point (a so-called "virtual stop"; for example, for "pick-up" or "drop-off") in order to avoid a prolonged continuation of the journey in the insufficiently safe second safety level (should it persist). Preferably, a comparable driving maneuver can also be initiated in higher safety levels, whereby a (possibly not immediate) standstill of the car can also be provided for in the higher safety levels. In the second safety level, it can be assumed that a passenger has unfastened their seatbelt and left their designated passenger seat – for whatever reason.For this reason alone, reducing the car's speed is advisable, as an abrupt braking maneuver could potentially cause the passenger to be thrown uncontrollably around the interior, possibly resulting in (unintended) contact with a driver's control. Similarly, in the second safety scenario, where the passenger has unbuckled their seatbelt and left their seat, it cannot be ruled out that their next movement might be towards a driver's control. Therefore, a precautionary reduction in speed (to minimize the potential impact of any intervention) is already recommended in this case.

[0026] Ideally, at least one mechanical sensor detects an actual intervention in a driver's control element of the passenger vehicle, and, based on this detection, automatically initiates a driving maneuver to bring the vehicle to a stop. Depending on the type of intervention or the driver's control element, the vehicle can be brought to a standstill immediately or with a delay, for example, by moving sideways at the next available opportunity.Stopping the car after an intervention in a driver control element has already taken place is also useful for driver controls that do not directly control driving functions and thus the driving movement has not yet been affected by the intervention, since it cannot be ruled out that another intervention in a driver control element to control direct driving functions could occur in the immediate future.

[0027] It is expedient to assign a third security level to a detected, actual intervention in a driver control element that does not directly control a driving function of the passenger car, and / or to a detected, actual intervention in a driver control element that does directly control a driving function of the passenger car, a fourth security level.

[0028] A driver control element that does not directly control a driving function of the passenger vehicle includes, in particular, the switches of a lighting or turn signal system, and possibly the windshield wiper lever or similar. A driver control element that directly controls a driving function of the passenger vehicle includes, in particular, the accelerator / gas and brake pedals, the steering wheel, and the gearshift lever of the transmission (and possibly the clutch pedal). Dividing these two different intervention scenarios (with varying effects on the vehicle's movement) into different safety levels allows for the initiation of correspondingly different driving maneuvers, so that, for example, it can be assessed whether an immediate stop (which can generally increase the danger in a traffic situation) is absolutely necessary.Advantageously, the targeted driving maneuver therefore includes, at least in the third safety level, stopping the passenger car at the next available opportunity, and / or at least in the fourth safety level, stopping the passenger car immediately.

[0029] It is further advantageous if at least one optical sensor includes a camera and / or a radar sensor. A camera allows for reliable detection of the positions and, if applicable, movements of passengers inside the vehicle via image recognition. A radar sensor can have the advantage of eliminating the need for complex image recognition, thus reducing system complexity.

[0030] Ideally, a passenger seat is occupied as intended based on a corresponding, prior booking. Such bookings are made particularly in the context of commercial passenger transport, preferably via the operator's (who also provides the vehicle) booking portal. During the booking process, each passenger can be assigned a specific seat in the vehicle, allowing this information to be used to verify whether the seat is occupied as planned.

[0031] The invention further describes an autonomously operated passenger car equipped to carry out the aforementioned method. The passenger car includes, in particular, the sensors, control units, and communication means required for autonomous operation and for carrying out the method.

[0032] The passenger car according to the invention shares the advantages of the method according to the invention. The advantages specified for the method and for its further developments can be transferred analogously to the passenger car.

[0033] An embodiment of the invention is explained in more detail below with reference to the drawings. The drawings schematically depict:

[0034] Fig. 1 shows a top view of an autonomously operated passenger car,

[0035] Fig. 2 shows a block diagram of a method for protecting the controls of the passenger car according to Fig. 1 from interference by passengers during autonomous operation. Corresponding parts and sizes are identified by the same reference numerals in all figures.

[0036] Figure 1 schematically depicts a top-down view of a passenger car 1 equipped for autonomous ferry operation. For this purpose, the passenger car 1 is equipped with traffic sensors 2, which detect the traffic situation (not shown in detail) in which the passenger car 1 is located. The traffic sensors 2 comprise a number of front cameras 4 and a number of rear cameras 6. Figure 1 also schematically illustrates the viewing angles 8, 10 of the front cameras 4 and the rear cameras 6. Additionally, the traffic sensors 2 include further sensors 12 for detecting the distances and speeds of objects in the traffic situation. These sensors 12 can be, in particular, radar and / or lidar sensors, and the objects can be other vehicles or other road users, or obstacles or boundaries near a lane.

[0037] The individual cameras 4, 6 and sensors 12 of the traffic sensor system 2 are connected to an evaluation unit (not shown in detail). This unit uses the image data generated by the front and rear cameras 4, 6 to specifically identify a traffic situation (and thus the associated objects such as road layout, vehicles, etc.). It also uses the data generated by the sensors 12 to determine the speeds and accelerations of other objects, particularly other road users, within the traffic situation. Based on this data of the recorded traffic situation, a control unit generates a command to activate individual actuators of the car 1. These actuators control the driving motion of the car 1 by actuating an accelerator pedal 14 and a brake pedal 16 (and, if applicable, a clutch; not shown in Figure 1), a transmission, and a steering column. They also control the turn signals and other functions.Other lights of the lighting system can be controlled. This enables car 1 to operate autonomously.

[0038] The car 1 is additionally designed and equipped to transport passengers (not shown) in autonomous mode on passenger seats 20 (shown as dashed lines in Figure 1). For this purpose, a driver's seat 22 remains unoccupied, in particular to prevent a passenger sitting in the driver's seat 22 from unintentionally or carelessly touching and thereby operating the driver's controls 24 (which include the accelerator pedal 14, the brake pedal 16, a gearshift lever 26 for operating the transmission, a steering wheel 28 for moving the steering column, and also a turn signal lever, etc., not shown in detail).

[0039] However, even a passenger properly seated in their assigned passenger seat 22 may potentially interfere with the driver controls 24. Such interference could directly affect the vehicle's movement 1 and thus have significant consequences for driving safety. Therefore, any such interference with a driver control 24 by a passenger should be prevented as far as possible, ideally before it occurs. A corresponding procedure is illustrated in Figure 2 using a block diagram.

[0040] Figure 2 shows how, based on various detections in the car 1, different safety levels SO to S4 are assigned to the respective situations, for which different actions are carried out by an autonomous driving control 30 (English “Self Driving System”, SDS) and / or different interactions INT with a passenger.

[0041] In the passenger car 1, the planned occupancy 36 of passenger seats 20 booked for commercial passenger transport is monitored, among other things, by means of at least one electromagnetic sensor 32, which may be a radar sensor and / or a camera with associated image recognition, and / or by means of mechanical sensors 34 (such as pressure or weight sensors). In addition, a seatbelt buckle detection system 38, acting as a mechanical sensor 34, monitors whether the respective safety device is fastened at the booked passenger seats 20. Likewise, the operation of the individual driver controls 24 is directly monitored; that is, any intervention in a driver control 24 is also registered for the process (so that the driver controls 24 function as mechanical sensors 34 for their own operation within the process).

[0042] In a basic stage SO, each booked passenger seat 20 has a planned occupancy 36 (+), and ("AND") the associated seatbelt buckle detection 38 detects a closed seatbelt (+). Thus, the autonomous driving control 30 can control the car 1 in a completely normal operating mode N.

[0043] However, if an open seatbelt buckle (-) is detected in a passenger seat 20 that is scheduled to be occupied (+), or if a passenger seat 20 that is booked is not scheduled to be occupied (-) but the corresponding seatbelt buckle is closed (+), this detected combination (XOR) is assigned a first safety level S1, as long as no intervention has yet occurred in a driver control element 24 (-). Since this already represents a first form of disruption to the ideal situation defined by the basic level SO, which could potentially lead to such an intervention, i.e., a potentially imminent intervention 40 already exists, an interaction with the passenger is initiated for the first safety level S1. This involves an acoustic warning 42 (e.g., a message and / or a signal tone) and / or a visual warning 43 (e.g., a visual message on a display and / or a flashing light) being issued to the passenger.Furthermore, a communication system 44 of the car 1 can establish a connection 45 to a remote assistance system 46, i.e., a service center with human operators who have partial access to the information collected during the process and can communicate with the passenger. The interaction with the passenger through the warnings 42, 43, and, if applicable, via the remote assistance system 46, serves to inform the passenger about the potentially imminent intervention 40 (and thus allow them to exercise particular caution in their subsequent movements), and also enables them, for example, to fasten their seatbelt again to return to the basic level SO. In the first safety level S1, the potentially imminent intervention 40 is not yet considered so likely that the autonomous driving control 30 would need to intervene in the normal operation N of the car 1.

[0044] However, if it is detected that a booked passenger seat 20 is neither occupied as scheduled (-) nor that the corresponding seatbelt buckle is closed (-), a higher probability of a potentially imminent intervention 40 is assumed than in the first safety level S1, and a second safety level S2 is assigned accordingly. The interactions with the passenger mentioned for the first safety level S1 can also take place in the second safety level S2 (possibly with appropriate adjustments, e.g., to the respective message of the acoustic or visual warning 42, 43, to the specific situation). In addition, however, due to the increased probability of intervention (compared to the first safety level S1), a driving maneuver M deviating from normal operation N is initiated by the autonomous driving control 30, in which the speed is initially reduced.This increases safety in the event that an intervention in a driver control element 24 actually occurs, as braking distances are shortened in particular (and kinetic energy is reduced). If necessary, automatic stopping at the nearest virtual stopping point may also be provided.

[0045] If an actual intervention 50 is detected by a driver control element 24, a third or fourth safety level, S3 or S4, is assigned depending on whether the driver control element 24 directly controls a driving function 52 (as is the case for the accelerator / gas and brake pedals 14, 16, as well as the gearshift lever 26 and the steering wheel 28). If this is not the case (e.g., in the case of an intervention in a windshield wiper lever or a turn signal), the third safety level, S3, is assigned to the actual intervention. Interventions in driver controls 24 that directly control a driving function 52 (+) are assigned to the fourth safety level, S4.This distinction is useful insofar as, in the case of an intervention 50 of the third security level S3, the driving movement of the car 1 may not yet have to be changed to the same extent as in the fourth security level S4 (however, in principle, an intervention 50 of the third security level S3 also increases the probability of an actual intervention 50 of the fourth security level S4).

[0046] Even in the third and fourth security levels S3, S4, the interactions with the passenger mentioned for the first security level S1 can take place (if necessary, with appropriate adaptation of, for example, the respective message of the acoustic or visual warning notice 42, 43 to the specific situation).

[0047] In addition, the driving maneuver M is adapted to the increased safety requirements of the third and fourth safety levels S3 and S4. This may include, in particular, that in the third safety level S3, the driving maneuver M involves stopping A at the next possible opportunity (i.e., according to applicable traffic regulations; for example, by continuing to slow down until a permissible stopping point is reached), while in the fourth safety level S4, the driving maneuver M brings car 1 to an immediate stop Z.

[0048] The described procedure allows for consideration of different probabilities of interventions and their respective effects on driving safety, and enables the selection of an optimal action to minimize risk (while maintaining driving comfort and traffic flow).

[0049] Although the invention has been illustrated and described in detail by the preferred embodiment, the invention is not limited by the disclosed examples and other variations can be derived by a person skilled in the art without departing from the scope of protection of the invention. List of reference numerals

[0050] Car

[0051] Traffic sensors

[0052] Front camera

[0053] Rear camera, 10 Viewing angle 2 Sensor 4 Accelerator pedal 6 Brake pedal 0 Passenger seat 2 Driver's seat 4 Driver's control element 6 Gearshift lever 8 Steering wheel 0 Autonomous driving control 2 Electromagnetic sensor 4 Mechanical sensor 6 Planned occupancy 8 Seat belt buckle detection 0 Potentially imminent intervention 2 Acoustic warning 3 Visual warning 4 Communication system 5 Connection 6 Remote assistance 0 Actual intervention 2 Immediate control of a driving function A Stop at the next possible opportunity

[0054] M Driving maneuvers

[0055] Normal operation

[0056] SO Basic Level

[0057] S1-S4 first to fourth security level immediate stop

Claims

Patent claims 1. Method for protecting an autonomously operated passenger car (1) from interference (50) by a passenger, wherein a potentially imminent interference (40) and / or an actual interference (50) in a driver control element (24) of the passenger car (1) is detected by means of at least one electromagnetic sensor (32) and / or at least one mechanical sensor (34), wherein a security level (S1-S4) is assigned to the detected potentially imminent and / or actual interference (40, 50), and wherein, depending on the security level (S1-S4), a corresponding interaction with the passenger takes place and / or a driving maneuver (M) of the passenger car (1) is automatically controlled, in which at least one driving speed is reduced.

2. Method according to claim 1, wherein a seat belt buckle detection (38) as a mechanical sensor (34) detects whether a seat belt is closed on a passenger seat (20), and / or wherein a weight sensor as a mechanical sensor (34) and / or a directed electromagnetic person detection system detects whether a person is sitting on a passenger seat (20), and wherein an at least potentially imminent interference (40) with a driver control element (40) of the passenger car (1) is detected.

3. Method according to claim 2, wherein a potentially imminent intervention (40) from an improperly used passenger seat (20) is detected by a seat belt buckle recognized as closed in an associated unoccupied passenger seat (20), or a seat belt buckle recognized as open in an associated occupied passenger seat (20), and / or wherein a potentially imminent intervention (40) from an unoccupied passenger seat is detected by a seat belt buckle recognized as open in an associated unoccupied passenger seat (20).

4. Method according to claim 3, wherein a first safety level (S1) is assigned to the potentially imminent intrusion (40) from an improperly used passenger seat (20), and / or wherein a second safety level (S2) is assigned to the potentially imminent intrusion (40) from an unplanned abandoned passenger seat (20).

5. Method according to one of the preceding claims wherein at least for the detected potentially imminent intervention (40) the corresponding interaction with the passenger is carried out by means of an automatic acoustic and / or optical warning (42, 43) and / or by means of a connection (45) to a remote assistance system (46).

6. Method according to one of claims 3 to 5, wherein at least in the second safety stage (S2) a driving maneuver (M) of the passenger car (1) is automatically controlled in which a driving speed is reduced.

7. Method according to one of the preceding claims, wherein an actual intervention (50) in a driver control element (24) of the passenger car (1) is detected by means of at least one mechanical sensor (34), and wherein in the resulting safety level (S3, S4) a driving maneuver (M) of the passenger car (1) is automatically controlled, by which the passenger car (1) is brought to a stop (A, Z).

8. Method according to one of the preceding claims, wherein a third security level (S3) is assigned to a detected, actual intervention (50) in a driver control element (24) which does not directly control a driving function of the passenger car (1), and / or wherein a fourth security level (S4) is assigned to a detected, actual intervention (50) in a driver control element (24) which directly controls a driving function (52) of the passenger car (1). - 18 - 9. Method according to claim 8, wherein at least in the third safety level (S3) the controlled driving maneuver (M) includes stopping (A) the passenger car (1) at the next available opportunity, and / or wherein at least in the fourth safety level (S4) the controlled driving maneuver (M) includes an immediate stopping (Z) of the passenger car (1).

10. Method according to one of the preceding claims, wherein the at least one electromagnetic sensor (32) comprises a camera (4, 6) and / or a radar sensor (12).

11. Method according to one of claims 3 to 10, wherein a planned occupancy (36) of a passenger seat (20) is recognized on the basis of a corresponding, prior booking.

12. Autonomously operable passenger car (1) which is equipped to carry out the method according to one of the preceding claims.

Images