Control system and control method

1. A control system that generates a control output, the system comprising:

one or more processors and one or more non-transitory computer-readable storage media, the non-transitory computer-readable storage media having stored thereon at least a plurality of automatic control units and safety verification units, and;

a manipulation interface unit that generates manipulation quantity information and priority information based on a manipulation quantity which is a physical quantity;

wherein the plurality of automatic control units generate automatic control outputs based on predetermined inputs;

wherein the safety verification units confirm safety for the automatic control outputs, respectively; and

an output control unit that outputs a control output according to any one of a predetermined automatic control output selected from the automatic control outputs and the manipulation quantity information based on the automatic control outputs, the manipulation quantity information and the priority information, and the safety confirmation results of the safety verification units,

wherein, based on the priority information,

the output control unit either:

selects, as the predetermined automatic control output, an automatic control output having the highest selection priority from the automatic control outputs of which the safety is confirmed by the safety verification units among the automatic control outputs, and generates the control output according to the selected predetermined automatic control output, or

generates the control output according to the manipulation quantity information wherein a predetermined safety verification unit among the safety verification units confirms the safety of the predetermined automatic control output.

2. The control system according to claim 1 ,

wherein, when the safety is not confirmed for all the automatic control outputs by the safety verification units, the output control unit selects, as the predetermined automatic control output, an automatic control output having the highest selection priority from the automatic control outputs of which the safety is confirmed by the safety verification units in a predetermined range set in advance among the automatic control outputs, and generates the control output by using the selected predetermined automatic control output within the predetermined range.

3. The control system according to claim 1 ,

wherein, when the safety is not confirmed for all the automatic control outputs by the safety verification units, the output control unit stops the control output.

4. The control system according to claim 1 ,

wherein the safety verification units confirm the safety in multiple stages of safety, safety in a predetermined range, and unsafe.

5. The control system according to claim 1 ,

wherein each of the safety verification units confirms the safety of each of the automatic control outputs based on the predetermined input, a past predetermined input, and a past automatic control output.

6. The control system according to claim 1 ,

wherein, when each of the automatic control outputs includes an automatic control output for each of a plurality of variables, each of the safety verification units confirms safety of an automatic control output of a first variable included in the plurality of variables based on an automatic control output of a second variable which is included in the plurality of variables and is based on the first variable and the predetermined input.

7. The control system according to claim 1 ,

wherein the automatic control units generate the automatic control outputs by processing the predetermined inputs under different types of predetermined control,

machine learning control and feedback control are included in the predetermined control, and

a selection priority of the machine learning control is set to be higher than a selection priority of the feedback control.

8. The control system according to claim 1 ,

wherein the output control unit generates the control output according to the predetermined automatic control output in a first case classified based on the priority information,

generates the control output according to the manipulation quantity information when the safety verification units confirm the safety in a second case classified based on the priority information, and

generates the control output according to the manipulation quantity information regardless of the safety confirmation results of the safety verification units in a third case classified based on the priority information.

9. The control system according to claim 8 ,

wherein the first case is a case where the priority information is less than a predetermined first value,

the second case is a case where the priority information is equal to or greater than the predetermined first value and is less than a predetermined second value set to be greater than the predetermined first value, and

the third case is a case where the priority information is equal to or greater than the predetermined second value.

10. A control method of generating a control output, the method comprising:

generating manipulation quantity information and priority information from a manipulation quantity which is a physical quantity;

generating automatic control outputs;

confirming; and

outputting a control output according to any one of a predetermined automatic control output selected from the automatic control outputs and the manipulation quantity information based on the automatic control outputs, the manipulation quantity information and the priority information, and safety confirmation results,

wherein, based on the priority information either:

selecting, as the predetermined automatic control output, an automatic control output having a highest selection priority from the automatic control outputs of which the safety is confirmed among the automatic control outputs, and generating the control output according to the selected predetermined automatic control output and the manipulation quantity information, or

generating the control output according to the manipulation quantity information wherein a predetermined safety verification unit among the safety verification units confirms the safety of the predetermined automatic control output.