Fault tolerance for an automation controller for a machine is provided. A first portion of phases of the automation controller may be processed with fail operational protection, in which a failure of one of the computers used for the first portion still permits full operational functionality in the machine. The remaining portion of the phases are processed with fail degraded protection, in which a failure of a computer used for the remaining portion permits continued operation but with one or more constraints, as compared to the fail operational portions.

Provided is an autonomous moving body configured to move along a planned movement path to execute a given task, including: an external sensor configured to recognize another autonomous moving body given another task and an operation state of the another autonomous moving body; an overtaking determination unit configured to determine, when it is recognized by the external sensor that the another autonomous moving body moves along the movement path, whether to overtake the another autonomous moving body; and a movement control unit configured to control a moving unit based on the determination of the overtaking determination unit.

Provided is an autonomous moving body configured to move along a planned movement path to execute a given task, including: an external sensor configured to recognize another autonomous moving body given another task and an operation state of the another autonomous moving body; an overtaking determination unit configured to determine, when it is recognized by the external sensor that the another autonomous moving body moves along the movement path, whether to overtake the another autonomous moving body; and a movement control unit configured to control a moving unit based on the determination of the overtaking determination unit.