The disclosure provides an early notification system to alert a driver of an approaching unsafe autonomous or semi-autonomous driving zone so that a driver may switch vehicle to a non-autonomous driving mode and navigate safely through the identified location. In response, to a determination of an upcoming unsafe autonomous or semi-autonomous driving zone, the driver or system may take appropriate actions in response to the early notification.

A control device for controlling an action of a movable body that can be moved by unmanned driving includes an acquisition unit that acquires disturbance information regarding an external factor that affects control of the unmanned driving and is different from the external factor of the mobile body, and a control unit that changes a control form of the action of the mobile body using the disturbance information.

A control device for controlling an action of a movable body that can be moved by unmanned driving includes an acquisition unit that acquires disturbance information regarding an external factor that affects control of the unmanned driving and is different from the external factor of the mobile body, and a control unit that changes a control form of the action of the mobile body using the disturbance information.

In embodiments of an autonomous vehicle platform and safety architecture, safety managers of a safety-critical system monitor outputs of linked components of the safety-critical system. The linked components comprise at least three components, each of which is configured to produce output indicative of a same event independent from the other linked components by using different input information than the other linked components. The safety managers also compare the outputs of the linked components to determine whether each output indicates the occurrence of a same event. When the output of one linked component does not indicate the occurrence of an event that is indicated by the outputs of the other linked components, the safety managers identify the one linked component as having failed. Based on this, the outputs of the other linked components are used to carry out operations of the safety-critical system without using the output of the failed component.

A remote operation system includes a moving body is a target of a remote operation performed by a remote operator and a remote operator terminal on the remote operator side. The remote operation system determines whether at least one of an abnormality in a communication between the moving body and the remote operator terminal, an abnormality in the moving body, and an abnormality in the remote operator terminal occurs. The remote operation system sets a gain to be larger when the abnormality occurs than when no abnormality occurs. The remote operation system calculates a reaction force control amount by multiplying a base reaction force control amount by the gain. The remote operator terminal applies an operation reaction force according to the reaction force control amount to a remote operation member operated by the remote operator.

System, methods, and machine-readable media may facilitate control of an aircraft. An actuator may be controlled based on the following. A first control signal may be output, with a first command module, to control the actuator. The first command module may include a first electronic configuration. Commands generated by the first command module and/or system response signals may be monitored with a monitor module. The monitor module may include a third electronic configuration that is different from the first electronic configuration. A second control signal may be output, with a second command module, to control the actuator when the first command module is deactivated or malfunctioning. The second command module may include a second electronic configuration that is different from the first electronic configuration and the third electronic configuration. The actuator may be controlled using the second control signal when the first command module is deactivated or malfunctioning.

System, methods, and machine-readable media may facilitate control of an aircraft. An actuator may be controlled based on the following. A first control signal may be output, with a first command module, to control the actuator. The first command module may include a first electronic configuration. Commands generated by the first command module and/or system response signals may be monitored with a monitor module. The monitor module may include a third electronic configuration that is different from the first electronic configuration. A second control signal may be output, with a second command module, to control the actuator when the first command module is deactivated or malfunctioning. The second command module may include a second electronic configuration that is different from the first electronic configuration and the third electronic configuration. The actuator may be controlled using the second control signal when the first command module is deactivated or malfunctioning.

A lawn mower control method and device, a lawn mower, and a storage medium. The method comprises: detecting operating data and sensing data of a plurality of operating sensors provided on a lawn mower, wherein the plurality of operating sensors comprise at least two different types of sensors; fusing the sensing data of the plurality of operating sensors to obtain environment data around the lawn mower; determining, when it is detected that a fault occurs in any of the operating sensors, a fault type of a faulty sensor according to the operating data of the faulty sensor and the environment data around the lawn mower; and controlling, if the fault type of the faulty sensor is a first fault type, the faulty sensor to stop operating, and a backup sensor corresponding to the faulty sensor to start operating.

A lawn mower control method and device, a lawn mower, and a storage medium. The method comprises: detecting operating data and sensing data of a plurality of operating sensors provided on a lawn mower, wherein the plurality of operating sensors comprise at least two different types of sensors; fusing the sensing data of the plurality of operating sensors to obtain environment data around the lawn mower; determining, when it is detected that a fault occurs in any of the operating sensors, a fault type of a faulty sensor according to the operating data of the faulty sensor and the environment data around the lawn mower; and controlling, if the fault type of the faulty sensor is a first fault type, the faulty sensor to stop operating, and a backup sensor corresponding to the faulty sensor to start operating.

Physical and logical components of a long line loiter control system address control of a long line loiter maneuver conducted beneath a carrier, such as a fixed-wing aircraft. Control may comprise identifying, predicting, and reacting to estimated states and predicted states of the carrier, a suspended load control system, and a long line. Identifying, predicting, and reacting to estimated states and predicted states may comprise determining characteristics of state conditions over time as well as response time between state conditions. Reacting may comprise controlling a hoist of the carrier, controlling thrusters of the suspended load control system, and or controlling or issuing flight control instructions to the carrier so as not to increase the response time and or to avoid a hazard.