What teleoperation of heavy machinery means
Teleoperation allows a person to control a machine from a separate workstation through an interface and communications link. It may take place close to the equipment with direct visibility, or from a station receiving camera and sensor information. It does not necessarily mean autonomy: a person may still decide every action.
Distance may change exposures and tasks, but does not by itself establish an overall reduction in risk. Assessment should cover the machine, remote station, available information, communications and people remaining in the working area. This entry focuses on ergonomics and preventive organisation. It provides no operating manoeuvres, universal separation distances or instructions for converting conventional machinery to remote control. The unit of assessment is the complete work system rather than the remote console alone.
Scope of standards and available evidence
ISO 15817:2012, confirmed in 2023, concerns safety requirements for remote operator control systems on earth-moving machinery. Its public scope excludes autonomous systems operating without operator assistance. This boundary prevents it being presented as a universal standard for every robot or heavy machine.
A project must determine requirements appropriate to the particular machine, use and jurisdiction. We propose requesting a functional description, operating limitations, applicable documentation and acceptance evidence for the supplied configuration. A video of a remotely controlled excavator does not establish that the same system is suitable for a crane, mine or different operation. Ergonomic assessment does not replace machinery safety verification either. The documentation should identify which conclusions apply to the actual intended use and which questions remain open.
Sources: [1]
Remote perception and information quality
The operator needs to understand events at the machine and in its surroundings. When that understanding depends on displays, examine both what they show and what they omit: unseen areas, depth, orientation, camera changes and equipment status. We propose documenting information needed for each task before deciding how many screens to install.
More images do not automatically mean better perception. Review should test whether the controlled machine is easy to identify, a current image can be distinguished from an interrupted feed and insufficient information can be recognised. Trials should represent relevant conditions within a safe setting. Inadequate visibility should not be compensated by demanding extraordinary continuous attention. The preventive question is which uncertainty design removes and which still requires an operating restriction.
Latency, variability and communication loss
A technical paper by Tao Zhang, published in 2020 and hosted by NIST, identifies latency and its variability as challenges for vehicle teleoperation. It is an architecture and safety discussion, not validation of a machinery model or a table of universally safe response times.
For project assessment, we propose examining the complete information path: capture, transmission, presentation, decision and machine response. A marketed network speed figure does not necessarily represent this entire process. Acceptance criteria need to arise from the system and its risks. Expected behaviour under degraded conditions and responsibility for suspension under authorised procedures must also be defined. This entry sets no universal millisecond threshold. Performance claims should make clear what was measured and under which conditions, rather than implying that connectivity alone guarantees safety.
Sources: [4]
Physical ergonomics of the remote station
HSE recommends assessing a display-screen workstation as a combination of equipment, furniture, conditions, task and individual needs. It also states that self-assessment software is not an assessment by itself. This British reference provides an assessment approach without replacing applicable local obligations.
For a teleoperation station, we propose observing control reach and use, arm support, screen position, legibility and seat adjustment. Include long sequences and occasional tasks, rather than only the posture captured in a photograph. A configuration comfortable for one person may need adjustment for another. Agree how discomfort can be reported and check whether modifications work during actual activity with the usual equipment and accessories. A completed checklist should lead to resolved issues rather than being treated as the final outcome.
Sources: [3]
Safety of people remaining beside the machine
NIOSH describes mining struck-by and caught-in risks, including visibility and remote equipment control issues. It also highlights functional safety questions introduced by programmable electronic systems. Removing the operator from a cab does not remove other people’s exposure to machinery movements.
In the proposed organisation, identify who may enter the area and how they coordinate with remote operation. Maintenance, inspection and support tasks require their own procedures and clear responsibilities. A camera or proximity warning should not automatically be assumed to replace planned protective measures. Assessment needs to cover actual interactions between equipment and people. This entry defines neither exclusion distances nor ways of bypassing safeguards. Any claimed reduction in exposure should consider those who install, support and maintain the equipment as well as its operator.
Sources: [2]
Mental workload and changes of mode
Ergonomic review should examine which decisions a person makes, with what information and under which time pressure. We propose distinguishing continuous remote driving, supervision of an automatic function and occasional assistance. Moving between them can change what the operator must monitor and who has control.
Interfaces and procedures should make the active mode and handover conditions understandable. One person should not be assumed capable of controlling several machines simply because several screens are available. That arrangement needs specific evidence and analysis of concurrent tasks. Review alarms, interruptions and simultaneous communications alongside the controls. The aim is to avoid silently transferring complexity to the operator as a requirement to remember information the system presents poorly. A clear responsibility model is part of the workstation design.
Training, practice and change management
We propose training that covers system understanding, perception limits, interpretation of states and coordination with local personnel. Experience driving from the cab is valuable, but does not by itself demonstrate competence at a remote station. Skills should be assessed through safe scenarios and observable criteria rather than an attendance certificate alone.
Changes to cameras, controls, software or workstation layout require impact assessment. A new view can alter familiar references; a shift handover can lose relevant information. Record the configuration tested, questions raised and actions completed before use. Competence also includes recognising insufficient information and communicating it through the approved pathway without improvising a dangerous solution. Training records should retain those limitations so familiarity with a previous configuration is not mistaken for validation of a changed system.
Hypothetical example of workstation adjustment
A company prepares a remote station for a repetitive earth-moving task. In this hypothetical example, it conducts trials in a controlled area and finds that the operator repeatedly turns their neck to alternate between two views. It also observes that interrupted video cannot be clearly distinguished from an image showing no movement.
The team modifies the screen arrangement and availability indication, then repeats the affected checks. It also reviews handover communication and responsibility for authorising continuation after an incident. Operation is not declared safe merely because the machine responds to controls. The test outcome combines understanding, comfort, information quality and risk control, while documenting remaining limitations. The example concerns an assessment process, not a verified performance claim for a particular product.
Indicators for evaluating improvement
Monitoring can combine time with usable information, communication incidents, misunderstood mode changes, reported discomfort and completed corrective actions. We propose accompanying each indicator with the task and observed exposure: shifts, operating hours or configuration used. An average without context may conceal differences between stations or stages of work.
Productivity should not be the only reference. It also matters whether staff know who controls the machine, handovers preserve information and identified limitations are resolved. No accidents during a short trial do not establish general safety. Keep disagreements and events without consequences as review opportunities, avoiding penalties for reporting problems that allow the design to be corrected. A useful dashboard makes unresolved limitations visible rather than presenting availability or output as a complete safety measure.
Relationship to OSH and project documentation
Teleoperation connects machinery safety, cognitive ergonomics, display-screen work, maintenance and activity coordination. Assessment needs to include the remote station and the physical environment where the machine operates. An improvement for the operator may be incomplete if difficult tasks are transferred to maintenance or support staff.
A management system may record assessments, responsibilities, training, versions, tests and actions according to functions actually available. That record does not replace safety controls and should not be used to operate critical equipment without a specifically designed and validated function. This entry attributes no remote machinery control to Sabentis. The purpose is understandable evidence of what changed, which benefit was verified and which conditions must remain in place for the system to be used.
Frequently asked questions
Are teleoperation and autonomy the same?
No. Teleoperation may retain continuous human control; autonomous functions need separate description and assessment.
Is there a universally safe latency?
None is established here. Criteria depend on the system, task and risks; network speed does not represent the complete response time.
Does moving the operator away remove machinery risks?
No. People remaining in the area, maintenance, communications and functional safety also require assessment.
Is an ergonomic chair sufficient?
No. Controls, displays, information, tasks, mental workload and coordination need assessment alongside furniture and individual adjustments.
