Remote Driving Control Handover With Standby Driver Redundancy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing remote driving systems face safety concerns due to potential erroneous driving determinations by a single remote driver, and existing solutions do not adequately address the need for redundancy in remote driving systems.
Innovation Solution
A remote driving system that assigns a second remote driver to assist the first driver under predetermined conditions, allowing for cooperative remote driving operations, with the first driver's operations being monitored and synchronized with the second driver's, and transitioning to the second driver's control when necessary.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single remote driver is assigned to operate a mobility, then the system operation is simple and efficient, but the safety is compromised due to potential erroneous driving determinations
Solution Approach 1:
A second remote driver is assigned in advance to a mobility before any erroneous driving determination occurs. The second remote driver remains in standby mode with monitoring capabilities, ready to intervene if needed. This preliminary assignment ensures safety redundancy is in place before problems arise, without requiring complex real-time decision-making about when to add drivers.
Solution Approach 2:
The system introduces a management server as an intermediary that coordinates between the first remote driver (primary operator), the second remote driver (standby operator), and the mobility. The management server handles driver assignment, monitoring data transmission, and intervention coordination, thereby managing the complexity of multi-driver operations without burdening the drivers themselves with complex coordination tasks.
2Reliability
If a second remote driver is assigned to provide redundancy and monitoring, then the safety is improved, but the system complexity and operational overhead increase
Solution Approach 1:
The system dynamically adjusts the operational state of the second remote driver based on real-time conditions. The second driver transitions between standby mode (monitoring only) and active intervention mode based on detected erroneous driving determinations. This dynamic state management allows the system to maintain safety redundancy while minimizing operational complexity during normal operations, only engaging the second driver when necessary.
Solution Approach 2:
The system implements continuous feedback loops where the second remote driver monitors the first driver's operations and the mobility's state. When erroneous driving determinations are detected, the feedback mechanism triggers automatic intervention protocols. This feedback-driven approach ensures that the added complexity of having a second driver is only fully activated when safety issues arise, maintaining operational simplicity during normal conditions.
3Device complexity
If the second remote driver remains in standby mode without active participation, then the system complexity is reduced, but the ability to intervene in erroneous driving determinations is weakened
Solution Approach 1:
The second remote driver is assigned in advance and maintains monitoring capabilities even in standby mode. This preliminary preparation ensures that when erroneous driving determinations occur, the second driver can immediately intervene without requiring system reconfiguration or additional complexity at the moment of intervention. The monitoring infrastructure is established beforehand, enabling rapid response when needed.
Data Source
AI summary
The remote driving system comprises one or more processors configured to additionally assign, at predetermined conditions, a second remote driver to a target mobility to which the first remote driver is assigned. The target mobility is configured to operate according to the driving operation information of the remote driving by the first remote driver while the remote driving by the second remote driver is not being performed, and to operate according to the driving operation information of the remote driving by the second remote driver while the remote driving by the second remote driver is being performed.