Apparatus and method for managing control authority transition in vehicle

<u>CROSS-REFERENCE TO RELATED APPLICATION</u>

0001The present application claims priority to and the benefit of Korean Patent Application No. <patcit id="pcit0001" dnum="KR1020190013933"><text>10-2019-0013933, filed on February 1, 2019</text></patcit>, which claims priority to and the benefit of <patcit id="pcit0002" dnum="US62655831B"><text>US Patent Application No. 62/655,831, filed on April 11, 2018</text></patcit>, the entire contents of which are incorporated herein by reference.

<u>TECHNICAL FIELD</u>

0002The present disclosure relates to an apparatus and method for determining whether to hand over control authority depending on a situation in an autonomous vehicle.

<u>BACKGROUND</u>

0003The statements in this section merely provide background information related to the present disclosure and may not constitute prior art.

0004With the development of the auto industry, an autonomous system and a driving assistance system which facilitates partially autonomous driving (hereinafter, for convenience of description, both of autonomous driving and driving assistance are referred to as "autonomous driving") have been developed. The autonomous system may provide a variety of functions, for example, setting speed keeping, vehicle-to-vehicle distance keeping (e.g., cruise control), lane keeping, and a lane change. The autonomous system may perform autonomous driving using various devices such as a sensor for sensing environments outside the vehicle, a sensor for sensing information about the vehicle, a global positioning system (GPS), map information, a driver state monitoring system, a steering actuator, an acceleration/deceleration actuator, a communication circuit, and a control circuit (e.g., an electronic control unit (ECU)). The autonomous system may be enabled according to an input of a driver. When a problem occurs or when the occurrence of the problem is predicted, the autonomous system may provide a notification of control authority transition to the driver. When the driver takes over control authority, the autonomous system may be released.

0005When control (override) by the driver greatly departs from control by the autonomous system, control authority transition may be prohibited. For example, when a steering angle of a steering wheel operated by the driver increases to more than a specified value or when a vehicle speed increases to more than a specified value, control authority transition may be prohibited. However, prohibiting control authority transition according to the above-mentioned uniform criteria may fail to be suitable for the safety of the driver. Thus, there is a need for developing a determination method for suitably prohibiting control authority transition.

<u>SUMMARY</u>

0006An aspect of the present disclosure provides an apparatus and method for determining whether to hand over control authority in consideration of a state of a driver and reliability of a control input by the driver.

0007The technical problems to be solved by the present inventive concept are not limited to the aforementioned problems, and any other technical problems not mentioned herein will be clearly understood from the following description by those skilled in the art to which the present disclosure pertains.

0008According to an aspect of the present disclosure, an apparatus for managing control authority transition in a vehicle may include: a steering device, an acceleration device, a deceleration device, a sensor configured to sense information about a driver of the vehicle, and a control circuit configured to be electrically connected with the steering device, the acceleration device, the deceleration device, and the sensor. The control circuit may be configured to obtain state information about the driver using the sensor, while performing autonomous control, receive a control input by the driver to at least some of the steering device, the acceleration device, or the deceleration device, determine whether to hand over control authority, based on the state information and reliability of the control input, and hand over the control authority to the driver, when it is determined that the control authority is handed over.

0009In some forms of the present disclosure, the sensor may include a camera. The control circuit may be configured to obtain the state information by analyzing an image of the driver, the image being obtained by the camera.

0010In some forms of the present disclosure, the state information may include information associated with a line of sight of the driver and information associated with driver seating.

0011In some forms of the present disclosure, the reliability of the control input may include information about a probability of collision by the control input.

0012In some forms of the present disclosure, the control circuit may be configured to calculate an expected path of the vehicle based on the control input and determine a probability of collision of the vehicle based on the expected path.

0013In some forms of the present disclosure, the control circuit may be configured to prohibit the control authority transition, when it is impossible to hand over the control authority.

0014In some forms of the present disclosure, the apparatus may further include an input device configured to be electrically connected with the control circuit. The control circuit may be configured to immediately hand over the control authority to the driver, when an input for the control authority transition is received via the input device.

0015In some forms of the present disclosure, the apparatus may further include an input device configured to be electrically connected with the control circuit. The control circuit may be configured to resume performing the autonomous control, after the control authority is handed over, when the control input of the driver is stopped or when an input for the autonomous control is received via the input device.

0016In some forms of the present disclosure, the control circuit may be configured to hand over the control authority to the driver, when pupils of the driver and driver seating are detected and when there is no probability of collision by the control input.

0017In some forms of the present disclosure, the control circuit may be configured to prohibit the control authority transition, when pupils of the driver and driver seating are detected and when there is a probability of collision by the control input.

0018In some forms of the present disclosure, the control circuit may be configured to prohibit the control authority transition, when pupils of the driver are not detected.

0019In some forms of the present disclosure, the control circuit may be configured to perform the autonomous control according to a predetermined minimum risk maneuver (MRM), when driver seating is not detected.

0020According to another aspect of the present disclosure, a method for managing control authority transition in a vehicle may include: obtaining state information about a driver of the vehicle, while performing autonomous control, receiving a control input by the driver to at least some of a steering device, an acceleration device, or a deceleration device, which is included in the vehicle, determining whether to hand over control authority, based on the state information and reliability of the control input, and handing over the control authority to the driver, when it is determined that the control authority is handed over.

0021In some forms of the present disclosure, the state information may include information associated with a line of sight of the driver and information associated with driver seating.

0022In some forms of the present disclosure, the reliability of the control input may include information about a probability of collision by the control input.

0023Further areas of applicability will become apparent from the description provided herein. It should be understood that the description and specific examples are intended for purposes of illustration only and are not intended to limit the scope of the present disclosure.

<u>DRAWINGS</u>

0024In order that the disclosure may be well understood, there will now be described various forms thereof, given by way of example, reference being made to the accompanying drawings, in which: <ul id="ul0001" list-style="none" compact="compact"><li><figref idref="f0001">FIG. 1</figref> is a block diagram illustrating a configuration of an apparatus for managing control authority transition in a vehicle in one form of the present disclosure;</li><li><figref idref="f0002">FIG. 2</figref> is a block diagram illustrating a configuration of an apparatus for managing control authority transition in a vehicle in one form of the present disclosure;</li><li><figref idref="f0003">FIG. 3</figref> is a drawing illustrating a criterion of determining whether to hand over control authority in an apparatus for managing control authority transition in a vehicle in one form of the present disclosure;</li><li><figref idref="f0004">FIG. 4</figref> is a drawing illustrating an exemplary operation of an apparatus for managing control authority transition in a vehicle in one form of the present disclosure;</li><li><figref idref="f0005">FIG. 5</figref> is a flowchart illustrating a method for managing control authority transition in a vehicle form in one form of the present disclosure;</li><li><figref idref="f0006">FIG. 6</figref> is a flowchart illustrating a method for managing control authority transition in a vehicle form in one form of the present disclosure; and</li><li><figref idref="f0007">FIG. 7</figref> is a block diagram illustrating a configuration of a computing system form in one form of the present disclosure.</li></ul>

0025The drawings described herein are for illustration purposes only and are not intended to limit the scope of the present disclosure in any way.

<u>DETAILED DESCRIPTION</u>

0026The following description is merely exemplary in nature and is not intended to limit the present disclosure, application, or uses. It should be understood that throughout the drawings, corresponding reference numerals indicate like or corresponding parts and features.

0027In describing elements of some forms of the present disclosure, the terms 1^st, 2^nd, first, second, A, B, (a), (b), and the like may be used herein. These terms are only used to distinguish one element from another element, but do not limit the corresponding elements irrespective of the nature, turn, or order of the corresponding elements. Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meanings as those generally understood by those skilled in the art to which the present disclosure pertains. Such terms as those defined in a generally used dictionary are to be interpreted as having meanings equal to the contextual meanings in the relevant field of art, and are not to be interpreted as having ideal or excessively formal meanings unless clearly defined as having such in the present application.

0028<figref idref="f0001">FIG. 1</figref> is a block diagram illustrating a configuration of an apparatus for managing control authority transition in a vehicle in some forms of the present disclosure.

0029Referring to <figref idref="f0001">FIG. 1</figref>, an apparatus 100 for managing control authority transition in a vehicle in some forms of the present disclosure may include a steering device 110, an acceleration device 120, a deceleration device 130, a sensor 140, an input device 150, and a control circuit 160. The apparatus 100 for managing the control authority transition in <figref idref="f0001">FIG. 1</figref> may be a portion of an autonomous system and may be loaded into the vehicle.

0030The steering device 110 may be configured to control a steering angle of the vehicle. The steering device 110 may include, for example, a steering wheel, an actuator interlocked with the steering wheel, and a controller for controlling the actuator and may be controlled by a driver of the vehicle and/or the autonomous system.

0031The acceleration device 120 may be configured to control acceleration of the vehicle. The acceleration device 120 may include, for example, a throttle, an actuator interlocked with the throttle, and a controller for controlling the actuator and may be controlled by the driver and/or the autonomous system.

0032The deceleration device 130 may be configured to control deceleration of the vehicle. The deceleration device 130 may include, for example, a brake, an actuator interlocked with the brake, and a controller for controlling the actuator and may be controlled by the driver and/or the autonomous system.

0033The sensor 140 may be configured to sense information about the outside and inside of the vehicle. For example, the sensor 140 may sense information about the driver. The sensor 140 may include a camera for capturing an image of the driver and may include a sensor for sensing whether the driver sits in the driver's seat. For another example, the sensor 140 may include a radar, a light detection and ranging (LiDAR), a camera, and the like, for sensing an environment outside the vehicle, and may include a wheel speed sensor, a yaw rate sensor, an acceleration sensor, a torque sensor, and the like, for sensing a state of the vehicle.

0034The input device 150 may be configured to receive an input from the driver of the vehicle. For example, the input device 150 may be implemented as a button, a switch, a lever, a touch sensor, a touch panel, or the like.

0035The control circuit 160 may be electrically connected with the steering device 110, the acceleration device 120, the deceleration device 130, the sensor 140, and the input device 150. The control circuit 160 may control the steering device 110, the acceleration device 120, the deceleration device 130, the sensor 140, and the input device 150 and may perform a variety of data processing and various arithmetic operations. The control circuit 160 may be, for example, an electronic control unit (ECU), a micro controller unit (MCU), or a sub-controller, which is loaded into the vehicle.

0036In some forms of the present disclosure, while performing autonomous control, the control circuit 160 may obtain state information about the driver using the sensor 140. The state information may include, for example, information associated with a line of sight of the driver and information associated with driver seating. In some forms of the present disclosure, the control circuit 160 may obtain an image of the driver using the sensor 140 (e.g., a camera) and may analyze the image of the driver to obtain state information about the driver. For example, the control circuit 160 may obtain state information about a line of sight of the driver from the image. For another example, the control circuit 160 may determine whether the driver sits in the driver's seat, using the sensor 140, and may obtain state information associated with whether the driver sits in the driver's seat.

0037In some forms of the present disclosure, the control circuit 160 may receive a control input by the driver to at least some of the steering device 110, the acceleration device 120, or the deceleration device 130. The control circuit 160 may receive a control input of the driver to a steering wheel, a decelerator pedal, or an accelerator pedal. The control circuit 160 may determine reliability of the received control input. In some forms of the present disclosure, the reliability of the control input may include information about a probability of collision by the control input. For example, the control circuit 160 may calculate an expected path of the vehicle by the received control input based on the received control input. The control circuit 160 may determine a probability of collision of the vehicle based on the expected path and a location of an external object. When the probability of collision is high (or when there is the probability of collision), the control circuit 160 may determine that the reliability of the control input is low. When the probability of collision is low (or when there is no probability of collision), the control circuit 160 may determine that the reliability of the control input is high.

0038In some forms of the present disclosure, the control circuit 160 may determine whether to hand over control authority, based on the state information and the reliability of the control input. When it is determined that the control authority is handed over, the control circuit 160 may hand over the control authority to the driver. When the driver is conscious and when the reliability of the control input is high, the control circuit 160 may determine to hand over the control authority. For example, when pupils of the driver and driver seating are detected and when there is substantially no probability of collision by the control input (or when a probability of collision is low), the control circuit 160 may hand over control authority to the driver.

0039In some forms of the present disclosure, when it is impossible to hand over the control authority, the control circuit 160 may prohibit control authority transition. When the driver is unconscious or when the reliability of the control input is low, the control circuit 160 may prohibit the control authority transition. For example, when there is a probability of collision by a control input, the control circuit 160 may prohibit the control authority transition. For another example, when pupils of the driver are not detected, the control circuit 160 may prohibit the control authority transition. For another example, when the driver seating is not detected, the control circuit 160 may perform autonomous control according to a predetermined minimum risk maneuver (MRM).

0040In some forms of the present disclosure, when an input for control authority transition is received via the input device 150, the control circuit 160 may immediately hand over control authority to the driver. Independently of determining whether to hand over the control authority, When a transition demand (TD) is received via a separate input device for control authority transition, the control circuit 160 may immediately hand over the control authority to the driver.

0041In some forms of the present disclosure, after the control authority is handed over, when the control input of the driver is stopped or when an input for autonomous control is received via the input device 150, the control circuit 160 may resume performing autonomous control. When a control input is stopped for convenience of the driver, the control circuit 160 automatically may initiate autonomous control. When an input for enabling autonomous control is received via the input device 150, the control circuit 160 may initiate the autonomous control.

0042<figref idref="f0002">FIG. 2</figref> is a block diagram illustrating a configuration of an apparatus for managing control authority transition in a vehicle in some forms of the present disclosure.

0043Referring to <figref idref="f0002">FIG. 2</figref>, the apparatus for managing the control authority transition in the vehicle in some forms of the present disclosure may include a sensor information processing device 210, a driver state determining device 220, a control authority transition determining device 230, a display device 240, and a controller 250. The apparatus for managing the control authority transition may detect a state of a driver, may determine reliability of a control input of the vehicle, and may prevent an unintended dangerous operation of the vehicle to ensure stability of the operation.

0044The sensor information processing device 210 may generate a driving path and may determine a risk of collision. The sensor information processing device 210 may measure dynamic information (e.g., steering, speed, and the like) for predicting a path of the vehicle depending on the purpose of an autonomous system and may recognize a surrounding environment (e.g., a forward lane, a surrounding object, and the like) to determine safety. The sensor information processing device 210 may include a driving path generator 211 and a collision risk determining device 212.

0045The driving path generator 211 may generate an expected path under control of the autonomous system and an expected path according to a control input of the driver. The expected path under the control of the autonomous system may be a driving trajectory calculated based on navigation information and may be a path which typically follows the center of a driving lane. The expected path according to the input of the driver may be calculated immediately when the input of the driver occurs.

0046The collision risk determining device 212 may determine whether a risk of collision occurs from a current time to a specific future time in consideration of all of control inputs of the autonomous system and the driver.

0047The driver state determining device 220 may monitor a state where the driver sits in the driver's seat and a state where a surrounding situation is recognized to determine whether it is possible for the driver to take over control authority.

0048A driver state detecting device 221 may analyze an image to recognize a face of the driver. The driver state detecting device 221 may recognize whether a face of the driver is detected, a drowsy state, a line of sight direction, and the like and may monitor a control input for steering, acceleration, deceleration, or the like of the driver, thus determining whether the driver sits in the driver's seat. The driver state detecting device 221 may divide a state of the driver into, for example, four states. For example, the driver state detecting device 221 may determine the state of the driver as a first state where the driver keeps his or her eyes on the road (e.g., where a line of sight of the driver is within a specified range), a second state where the driver does not keep his or her eyes on the road, but where the driver is conscious (e.g., where the line of sight of the driver is out of the specified range), a third state where the driver is unconscious, but where the driver sits in the driver's seat (e.g., pupils of the driver are not recognized, but where the face of the driver is recognized around the driver's seat), or a four state where the driver does not sit in the driver's seat or where it is impossible to determine whether the driver sits in the driver's seat.

0049A driver control reliability determining device 222 may determine whether it is possible to travel on an expected path based on a control input of the driver without collision. Particularly, the driver control reliability determining device 222 may determine reliability of a strong input capable of guiding the vehicle into a collision within a short time as being low. When there is a risk of collision on a path by the autonomous system, and when a risk of collision on an expected path based on a control input of the driver is lower than a risk of collision on a path by the autonomous system, the driver control reliability determining device 222 may determine the reliability of the control input as being high.

0050The control authority transition determining device 230 may determine whether to hand over control authority based on the state information of the driver and the reliability of the control input. A description will be given in detail of a detailed determination method with reference to <figref idref="f0003">FIG. 3</figref>.

0051The display device 240 may indicate a state of control authority to the driver. The display device 240 may output information indicating whether a control entity of the vehicle is the autonomous system or the driver. When it is necessary to hand over control authority, when the reliability of the control input is low, or when the driver is in an improper state (e.g., when the driver is drowsing, when the driver is out of the driver's seat, or the like), the display device 240 may output a warning notification. The system may additionally notify the driver of the reason why control authority is not handed over, on the display device 240.

0052The controller 250 may adjust steering and a speed of the vehicle. The controller 250 may control a behavior of the vehicle depending on a command or input of an entity of control authority (e.g., the autonomous system or the driver). The controller 250 may drive an actuator for controlling the behavior of the vehicle.

0053<figref idref="f0003">FIG. 3</figref> is a drawing illustrating a criterion of determining whether to hand over control authority in an apparatus for managing control authority transition in a vehicle in some forms of the present disclosure.

0054Referring to <figref idref="f0003">FIG. 3</figref>, the vehicle in some forms of the present disclosure may determine a state of its driver and reliability of a control input by the driver. The vehicle may verify whether the driver is conscious and sits in the driver's seat. When it is verified that the driver is conscious and sits in the driver's seat, the vehicle may determine the reliability of the control input. When the reliability of the control input is high, the vehicle may immediately hand over control authority to the driver.

0055When the reliability of the control input is low, that is, when there is a high risk of collision on an expected path according to the control input, the vehicle may postpone control authority transition. For example, after waiting until the risk of collision on the expected path according to the control input becomes low, the vehicle may hand over control authority to the driver. For another example, when the reliability of the control input is low, the vehicle may make its steering wheel, its decelerator pedal, and/or its accelerator pedal heavy to prevent an accident due to the control input with the low reliability.

0056When it is verified that the driver sits in the driver's seat, but when it is verified that the driver is drowsy or unconscious (e.g., when pupils of the driver are not recognized), the vehicle may postpone control authority transition.

0057When it is not verified that the driver sits in the driver's seat, the vehicle may control itself according to a minimum risk maneuver (MRM). The vehicle may perform deceleration driving, stopping driving, or avoidance driving according to a predetermined MRM.

0058<figref idref="f0004">FIG. 4</figref> is a drawing illustrating an exemplary operation of an apparatus for managing control authority transition in a vehicle in some forms of the present disclosure.

0059Referring to <figref idref="f0004">FIG. 4</figref>, a vehicle 410 in some forms of the present disclosuremay travel on a second lane of a road. The vehicle 310 may travel along the center of the second lane. For example, a driver of the vehicle 410 may provide a first steering input such that the vehicle 410 is headed toward a right lane. The vehicle 410 may calculate a first expected path 411 according to the first steering input. There may be a low probability of collision (or no probability of collision) on the first expected path 411. Thus, reliability of the first steering input may be high. When the driver is conscious upon the detection of the first steering input, the vehicle 410 may hand over control authority to the driver.

0060For another example, the driver of the vehicle 410 may provide a second steering input such that the vehicle 410 is headed toward a left lane. The vehicle 410 may calculate a second expected path 412 according to the second steering input. There may be a high probability (a probability) of collision on the second expected path 412 due to an external object 420. Thus, reliability of the second steering input may be low. Although the driver is conscious when detecting the second steering input, the vehicle 410 may postpone control authority transition.

0061<figref idref="f0005">FIG. 5</figref> is a flowchart illustrating a method for managing control authority transition in a vehicle in some forms of the present disclosure.

0062Hereinafter, it is assumed that a vehicle including an apparatus 100 for managing control authority transition in <figref idref="f0001">FIG. 1</figref> performs a process of <figref idref="f0005">FIG. 5</figref>. Furthermore, in a description of <figref idref="f0005">FIG. 5</figref>, an operation described as being performed by the vehicle may be understood as being controlled by a control circuit 160 of the apparatus 100 for managing control authority transition.

0063Referring to <figref idref="f0005">FIG. 5</figref>, in operation 510, the vehicle may perform autonomous control. In operation 520, the vehicle may obtain state information about its driver. In operation 530, the vehicle may receive a control input by the driver to at least some of a steering device, an acceleration device, or a deceleration device, which is included in the vehicle. In operation 540, the vehicle may determine whether to hand over control authority, based on the state information and reliability of the control input. When it is determined that the control authority is handed over, in operation 550, the vehicle may hand over the control authority to the driver. When it is determined that the control authority is not handed over, in operation 560, the vehicle may prohibit control authority transition.

0064<figref idref="f0006">FIG. 6</figref> is a flowchart illustrating a method for managing control authority transition in a vehicle in some forms of the present disclosure.

0065Hereinafter, it is assumed that a vehicle including an apparatus 100 for managing control authority transition in <figref idref="f0001">FIG. 1</figref> performs a process of <figref idref="f0006">FIG. 6</figref>. Furthermore, in a description of <figref idref="f0006">FIG. 6</figref>, an operation described as being performed by the vehicle may be understood as being controlled by a control circuit 160 of the apparatus 100 for managing control authority transition.

0066Referring to <figref idref="f0006">FIG. 6</figref>, while performing autonomous control, the vehicle may determine a state of its driver and may display the determined result. For example, the vehicle may determine the state of the driver as a first state, a second state, a third state, or a fourth state, which is described with reference to <figref idref="f0002">FIG. 2</figref>.

0067In operation 620, the vehicle may determine whether it is necessary to hand over control authority. For example, when a control input by the driver is detected or when a critical situation occurs, the vehicle may determine that it is necessary to hand over the control authority.

0068When it is necessary to hand over the control authority, in operation 630, the vehicle may evaluate reliability of a control input of the driver. The control input may include, for example, a steering input, an acceleration input, and/or a deceleration input. The vehicle may predict a probability of collision according to the control input and may evaluate the reliability based on the predicted probability of collision.

0069In operation 640, the vehicle may determine whether it is possible to hand over the control authority. For example, the vehicle may consider the state of the driver and the reliability of the control input on an overall basis to determine whether a current situation is a situation capable of handing over the control authority.

0070When it is possible to hand over the control authority, in operation 650, the vehicle may hand over the control authority to the driver.

0071In operation 660, the vehicle may determine whether to resume performing the autonomous control. For example, when the control input of the driver is stopped or when activation of an autonomous system is requested via a separate input device, the vehicle may automatically resume performing the autonomous control for use. For another example, when the control input of the driver is kept, the vehicle may continue performing control by the driver.

0072When it is impossible to hand over the control authority, in operation 670, the vehicle may postpone control authority transition and may determine whether to continue performing the autonomous control. In operation 680, the vehicle may determine whether it is possible to maintain the autonomous control.

0073When it is possible to maintain the autonomous control, in operation 690, the vehicle may continue performing the autonomous control. When it is impossible to maintain the autonomous control, in operation 695, the vehicle may perform an MRM.

0074Independently of the above-mentioned operations, when a TD is received via the separate input device from the driver, the vehicle may compulsorily hand over the control authority to the driver.

0075<figref idref="f0007">FIG. 7</figref> is a block diagram illustrating a configuration of a computing system in some forms of the present disclosure.

0076Referring to <figref idref="f0007">FIG. 7</figref>, a computing system 1000 may include at least one processor 1100, a memory 1300, a user interface input device 1400, a user interface output device 1500, a storage 1600, and a network interface 1700, which are connected with each other via a bus 1200.

0077The processor 1100 may be a central processing unit (CPU) or a semiconductor device for performing processing of instructions stored in the memory 1300 and/or the storage 1600. Each of the memory 1300 and the storage 1600 may include various types of volatile or non-volatile storage media. For example, the memory 1300 may include a read only memory (ROM) and a random access memory (RAM).

0078Thus, the operations of the methods or algorithms described in some forms of the present disclosuredisclosed in the specification may be directly implemented with a hardware module, a software module, or combinations thereof, executed by the processor 1100. The software module may reside on a storage medium (i.e., the memory 1300 and/or the storage 1600) such as a RAM, a flash memory, a ROM, an erasable and programmable ROM (EPROM), an electrically EPROM (EEPROM), a register, a hard disc, a removable disc, or a compact disc-ROM (CD-ROM). An exemplary storage medium may be coupled to the processor 1100. The processor 1100 may read out information from the storage medium and may write information in the storage medium. Alternatively, the storage medium may be integrated with the processor 1100. The processor and storage medium may reside in an application specific integrated circuit (ASIC). The ASIC may reside in a user terminal. Alternatively, the processor and storage medium may reside as a separate component of the user terminal.

0079The apparatus and method in some forms of the present disclosure may prevent unintended critical control (e.g., an error input or the like) and may safely hand over control authority to a driver in the situation where the safety of the driver is ensured, by determining whether to hand over the control authority in consideration of a state of the driver and the reliability of a control input by the driver.

0080In addition, various effects directly or indirectly ascertained through the present disclosure may be provided.

0081The description of the disclosure is merely exemplary in nature and, thus, variations that do not depart from the substance of the disclosure are intended to be within the scope of the disclosure. Such variations are not to be regarded as a departure from the spirit and scope of the disclosure.