Remote control system, controller, and remote control method

A controller comprising:

• a second memory configured to store a second program;
• a second processor configured to execute the second program stored in the second memory;
• and
• a second communication device configured to receive at least one information of first information and second information from a moving object, the moving object configured to be operatable by remote control, the moving object including a first memory configured to store a first program, a first processor configured to execute the first program stored in the first memory and a first communication device configured to transmit the at least one information, the first processor having a valid state and an invalid state as operating states, the first processor configured to be switchable between the valid state and the invalid state, the valid state being the operating state that accepts a remote control command supplied from outside the moving object, the invalid state being the operating state that rejects the remote control command, the first information being information indicating a sign that the operating state will be switched to the valid state, the second information being information indicating that the operating state has been switched to the valid state;
• wherein the second processor configured to judge whether a predetermined permission condition is satisfied when the second communication device has received the at least one information, and
• wherein
• when the second processor judges that the second communication device has received the first information and the permission condition is satisfied, the second processor transmits a permission notification indicating permission of switching of the operating state to the valid state to the moving object,
• when the permission notification has not been received within a predetermined period since transmission of the first information from the first communication device, the first processor limits switching of the operating state to the valid state, and
• when the second processor judges that the second communication device has received the second information and the permission condition is not satisfied, the second processor transmits an invalidation command for making switching of the operating state to the invalid state to the moving object.

A remote control method comprising:

• receiving at least one information of first information and second information from a moving object, the moving object configured to be operatable by remote control, the moving object including a first memory configured to store a first program, a first processor configured to execute the first program stored in the first memory and a first communication device configured to transmit the at least one information, the first processor having a valid state and an invalid state as operating states, the first processor configured to be switchable between the valid state and the invalid state, the valid state being the operating state that accepts a remote control command supplied from outside the moving object, the invalid state being the operating state that rejects the remote control command, the first information being information indicating a sign that the operating state will be switched to the valid state, the second information being information indicating that the operating state has been switched to the valid state;
• judging via a second processor whether the at least one information has been received and whether a predetermined permission condition is satisfied;
• transmitting a permission notification indicating permission of switching of the operating state to the valid state to the moving object when the judging judges that the receiving has received the first information and the permission condition is satisfied, wherein when the permission notification has not been received within a predetermined period since transmission of the first information from the first communication device, the first processor limits switching of the operating state to the valid state;
• and
• transmitting an invalidation command for making switching of the operating state to the invalid state to the moving object when the judging judges that the receiving has received the second information and the permission condition is not satisfied.