Method for controlling a robotic apparatus

A data processing system configured to perform a method for controlling a robotic apparatus, the method including the following steps:

• ascertaining a domain of observations made during subcritical events, from observations of controls performed in corresponding control situations, from a control data database;
• ascertaining, from the observations from the control data database, a criterion using which which a limitation of a probability of occurrence of a critical event can be inferred from a limitation of a probability of occurrence of a subcritical event;
• ascertaining further observations when controlling the robotic apparatus, and ascertaining a relative frequency of those of the further observations that are in the ascertained domain;
• checking whether the ascertained relative frequency corresponds to a probability of occurrence of a subcritical event that is limited in such a way that, according to the criterion, a limitation of the probability of occurrence of a critical event can be inferred therefrom;
• and
• triggering a safety measure in response to the ascertained frequency not corresponding to a probability of occurrence of a subcritical event that is limited in such a way that a limitation of the probability of occurrence of a critical event can be inferred therefrom according to the criterion.

A non-transitory computer-readable medium on which are stored commands for controlling a robotic apparatus, the commands, when executed by a processor, causing the processor to perform the following steps:

• ascertaining a domain of observations made during subcritical events, from observations of controls performed in corresponding control situations, from a control data database;
• ascertaining, from the observations from the control data database, a criterion using which which a limitation of a probability of occurrence of a critical event can be inferred from a limitation of a probability of occurrence of a subcritical event;
• ascertaining further observations when controlling the robotic apparatus, and ascertaining a relative frequency of those of the further observations that are in the ascertained domain;
• checking whether the ascertained relative frequency corresponds to a probability of occurrence of a subcritical event that is limited in such a way that, according to the criterion, a limitation of the probability of occurrence of a critical event can be inferred therefrom;
• and
• triggering a safety measure in response to the ascertained frequency not corresponding to a probability of occurrence of a subcritical event that is limited in such a way that a limitation of the probability of occurrence of a critical event can be inferred therefrom according to the criterion.