The system shall check GPS connection before switching to parallel guidance
Requirements
The system shall check IMU connection before switching to parallel guidance
Vehicle shall stop in case of any not recoverable error
System shall be robust against sporadic errors (e.g., invalid GPS positions, wrong heading angle)
System shall be robust against malicious actions (e.g., GPS spoofing)
The driving cycle shall be 9 hours
System shall be detected and drop unwanted requests to switch to parallel guidance
Assessment of the risk level of this operation should be performed
The control shall be performed every 200ms
The vehicle shall detect disconnection from the remote control
The communication shall be protected with EndToEnd CRC
Authentication procedure shall be performed before starting the communication
Only one remote control shall be supported at the same time