Wireless Safety Control Gating for Autonomous Mode Handover

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current system control technologies lack robust safety mechanisms to ensure safe operation, particularly in transitioning between supervised and autonomous modes, and do not provide explicit authorization for mode switching, which can lead to unsafe control scenarios.

Innovation Solution

A safety-enabled control system that includes a safety system interposed between the control system and the system-under-control, performing command gating and input validation, and requiring explicit authorization for mode switching through a confirmation process involving multiple remote control units.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a safety system is interposed between control system and system-under-control to perform command gating and input validation, then safety and reliability are improved, but device complexity increases

Engineering Contradiction:
ImprovesafetyVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

A safety system acts as an intermediary component positioned between the control system and the system-under-control. This safety system performs command gating and input validation functions, filtering and validating control values before they reach the system-under-control, thereby preventing unsafe operations while maintaining system reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The control architecture is segmented into distinct functional components: the control system, the safety system, and the system-under-control. This segmentation allows the safety system to operate as an independent validation layer, separating safety-critical functions from general control functions, which improves reliability while managing complexity through modular design.

Inventive Principle:
Principle #1Segmentation

2Reliability

If explicit authorization through confirmation process involving multiple remote control units is required for mode switching, then safety is improved, but ease of operation deteriorates

Engineering Contradiction:
ImprovesafetyVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

Before executing a mode transition, the system requires preliminary confirmation actions from multiple remote control units. The safety system checks for explicit authorization by verifying that predetermined confirmation conditions are met, ensuring that mode switching only occurs when intentionally authorized by multiple operators, thereby preventing accidental or unauthorized transitions.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements a feedback mechanism where the safety system monitors and validates mode transition requests by receiving confirmation signals from multiple remote control units. This feedback loop ensures that mode switching decisions are verified through multiple channels before execution, enhancing safety while maintaining operational control.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11934185B2Systems and methods for safety-enabled control
Publication Date: 2024.03.19 FORT ROBOTICS INC
  • US11934185B2 patent drawing
  • US11934185B2 patent drawing
  • US11934185B2 patent drawing

AI summary

Systems and methods for safety-enabled control by: establishing a wireless communication channel with a plurality of remote control units via the wireless interface device; in response to establishing the wireless communication channels, operating a system-under-control in a supervised mode based on input received from at least one of the plurality of remote control units; in response to a mode switch command received from a first remote control unit of the plurality of remote control units, providing the other remote control units with a request for a mode switch confirmation; and, in response to confirming receipt of a safety-rated input from an autonomous control system and receipt of a mode switch confirmation from each of the other remote control units, operating the system-under-control in an autonomous mode based on input received from the autonomous control system.