Moving Body Remote Control With Predetermined-Area Command Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The potential for abuse of remote instruction functions in moving bodies, such as vehicles or robots, exists as malicious actors can issue fake remote instructions to operate these entities without permission, leading to unauthorized control and potential theft or accidents.

Innovation Solution

Implementing a remote instruction verification process that determines the validity of received instructions by checking if the moving body is within a predetermined area and limiting operations if the instruction is invalid, including area verification, source verification, and recognition result verification to prevent unauthorized control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the moving body operates in accordance with remote instruction, then service functionality is improved, but security against malicious abuse deteriorates

Engineering Contradiction:
Improveservice functionalityVSAvoidsecurity risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by verifying the moving body's presence in the predetermined area before executing the remote instruction. The control device checks whether the moving body is detected by the detection device at the location where it should be when receiving the remote instruction. This pre-verification prevents malicious remote operations on moving bodies that are not in the expected location, thereby maintaining security while enabling service functionality.

Inventive Principle:
Principle #10Preliminary action

2Object-affected harmful factors

If remote instruction verification is implemented, then security is improved, but system complexity deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent uses an intermediary approach by introducing a detection device as a mediator between the moving body and the remote instruction system. The detection device detects the moving body's location and provides this information to the control device, which uses it to verify whether the moving body is in the predetermined area. This intermediary mechanism enables security verification without requiring complex direct communication or authentication protocols between the remote instruction system and the moving body.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If the moving body checks presence in predetermined area, then instruction validity is improved, but processing time deteriorates

Engineering Contradiction:
Improveinstruction validityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary detection of the moving body's location using the detection device before the remote instruction is executed. By continuously or periodically detecting the moving body's presence in the predetermined area and storing this information, the system prepares the verification data in advance. When a remote instruction is received, the control device can quickly compare the instruction's timestamp with the pre-detected location data, minimizing processing time while maintaining high reliability in instruction validity verification.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP4253198A1Moving body control method, moving body control system, and moving body control program
Publication Date: 2023.10.04 TOYOTA JIDOSHA KK
  • EP4253198A1 patent drawingFigure 1
  • EP4253198A1 patent drawingFigure 2
  • EP4253198A1 patent drawingFigure 3

AI summary

A moving body control method controls a moving body (1) having a function of operating in accordance with a remote instruction (INS) in a predetermined area (AR). The moving body control method includes: a remote instruction verification process that determines whether the remote instruction (INS) received by the moving body (1) is valid; and an operation limiting process that limits at least a part of an operation of the moving body (1) without following the remote instruction (INS), when the remote instruction (INS) received by the moving body (1) is invalid. The remote instruction verification process includes: determining whether or not the moving body (1) is present in the predetermined area (AR) at a time when the moving body (1) receives the remote instruction (INS); and determining that the remote instruction (INS) is invalid, when the moving body (1) is not present in the predetermined area (AR) at the time when the moving body (1) receives the remote instruction (INS).