Safety Control Gating for Authorized Mode Switching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing control systems lack the capability to ensure safe and authorized switching between supervised and autonomous modes, and do not allow centralized control from a single remote unit.
Innovation Solution
A safety-enabled control system that includes a safety system interposed between a control system and a system-under-control, which performs command gating and input validation to ensure safe control values are transmitted, and requires explicit authorization for mode switches through multiple remote control units.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a safety system performs command gating and input validation to ensure safe control values, then system safety is improved, but device complexity increases
Solution Approach 1:
A safety system is introduced as an intermediary component between the control system and the system-under-control. This safety system performs command gating and input validation functions, filtering and verifying control values before they reach the system-under-control. The intermediary safety system adds safety capabilities while maintaining a clear separation of concerns between control logic and safety validation.
Solution Approach 2:
The control architecture is segmented into distinct functional components: the control system that generates control commands, the safety system that validates and gates commands, and the system-under-control that executes commands. This segmentation allows each component to be optimized independently and improves overall system safety through modular validation.
2Reliability
If explicit authorization through multiple remote control units is required for mode switching, then control reliability is improved, but ease of operation deteriorates
Solution Approach 1:
The system requires preliminary authorization from multiple remote control units before allowing mode switching. This preliminary anti-action prevents unauthorized or accidental mode changes by requiring consensus or explicit approval from multiple control sources before the transition can occur.
Solution Approach 2:
Before mode switching can occur, the system performs preliminary actions including receiving authorization signals from multiple remote control units, validating the authorization, and confirming the intent to switch modes. This preliminary action sequence ensures that mode changes are deliberate and authorized before execution.
Data Source
AI summary
Systems and methods for safety-enabled control by: establishing a wireless communication channel with a plurality of remote control units via the wireless interface device; in response to establishing the wireless communication channels, operating a system-under-control in a supervised mode based on input received from at least one of the plurality of remote control units; in response to a mode switch command received from a first remote control unit of the plurality of remote control units, providing the other remote control units with a request for a mode switch confirmation; and, in response to confirming receipt of a safety-rated input from an autonomous control system and receipt of a mode switch confirmation from each of the other remote control units, operating the system-under-control in an autonomous mode based on input received from the autonomous control system.