Moving body control method, moving body control system, and non-transitory computer-readable recording medium

A moving body control system for controlling a moving body having a function of operating in accordance with a remote instruction in a predetermined area, the moving body control system comprising:

• one or more processors, wherein the one or more processors are configured to:
• perform, in response to a trigger signal, a remote instruction verification process that determines whether or not the remote instruction received by the moving body is a valid remote instruction issued with permission or a fake remote instruction issued maliciously without permission;
• operate the moving body in accordance with the remote instruction in response to the remote instruction being the valid remote instruction;
• and
• perform an operation limiting process that limits at least a part of an operation of the moving body without following the remote instruction, when the remote instruction received by the moving body is the fake remote instruction, wherein
• the remote instruction verification process includes an area verification process, a source verification process, and a recognition result verification process,
• the area verification process includes:
• determining whether or not the moving body is present in the predetermined area at a time in response to the moving body receiving the remote instruction;
• and
• determining that the remote instruction is the fake remote instruction, in response to the determination that the moving body is not present in the predetermined area at the time,
• the source verification process includes:
• transmitting inquiry information to determine that the remote instruction has been actually transmitted to the moving body;
• receiving reply information indicative of a result including transmitting of the remote instruction, and
• determining that the remote instruction is the fake instruction in response to the reply information indicating that there is no transmission of the remote instruction, and
• the recognition result verification process includes:
• recognizing a latest landmark from a position of the moving body after a power-on;
• acquiring reference information stored in a predetermined storage device, the reference information corresponding to a reference landmark recognized from a position of the moving body before power-off;
• determining that the latest landmark is not consistent with the reference landmark;
• and
• determining that the remote instruction is the fake instruction in response to determining that the latest landmark is not consistent with the reference landmark.

A non-transitory computer-readable recording medium on which a moving body control program for controlling a moving body having a function of operating in accordance with a remote instruction in a predetermined area is recorded, the moving body control program, when executed by a computer, causing the computer to:

• perform, in response to a trigger signal, a remote instruction verification process that determines whether or not the remote instruction received by the moving body is a valid remote instruction issued with permission or a fake remote instruction issued maliciously without permission;
• operate the moving body in accordance with the remote instruction in response to the remote instruction being the valid remote instruction;
• and
• perform an operation limiting process that limits at least a part of an operation of the moving body without following the remote instruction, when the remote instruction received by the moving body is the fake remote instruction, wherein
• the remote instruction verification process includes an area verification process, a source verification process, and a recognition result verification process,
• the area verification process includes:
• determining whether or not the moving body is present in the predetermined area at a time in response to the moving body receiving the remote instruction;
• and
• determining that the remote instruction is the fake remote instruction, in response to the determination that the moving body is not present in the predetermined area at the time,
• the source verification process includes:
• transmitting inquiry information to determine that the remote instruction has been actually transmitted to the moving body;
• receiving reply information indicative of a result including transmitting of the remote instruction;
• and
• determining that the remote instruction is the fake instruction in response to the reply information indicating that there is no transmission of the remote instruction, and
• the recognition result verification process includes:
• recognizing a latest landmark from a position of the moving body after a power-on;
• acquiring reference information stored in a predetermined storage device, the reference information corresponding to a reference landmark recognized from a position of the moving body before power-off;
• determining that the latest landmark is not consistent with the reference landmark;
• and
• determining that the remote instruction is the fake instruction in response to determining that the latest landmark is not consistent with the reference landmark.