Abstract: An apparatus including an indicator and a video sensor arranged to generate sensor data dependent on a state of the indicator, control circuitry configured to select the state of the indicator, to process instructions received in the apparatus from a remote driving station, to provide to the remote driving station the sensor data and to at least one of: provide to the remote driving station an indication of the indicator's selected state to enable the remote driving station to detect a malfunction in the sensor data, and obtain an observation of the state of the indicator, based on the sensor data, and determine whether the observation and the selected state of the indicator are consistent, to detect a malfunction in the sensor data, wherein the apparatus is a remotely operated vehicle, or configured to be installed in one.

Abstract: An apparatus including an indicator and a video sensor arranged to generate sensor data dependent on a state of the indicator, control circuitry configured to select the state of the indicator, to process instructions received in the apparatus from a remote driving station, to provide to the remote driving station the sensor data and to at least one of: provide to the remote driving station an indication of the indicator's selected state to enable the remote driving station to detect a malfunction in the sensor data, and obtain an observation of the state of the indicator, based on the sensor data, and determine whether the observation and the selected state of the indicator are consistent, to detect a malfunction in the sensor data, wherein the apparatus is a remotely operated vehicle, or configured to be installed in one.

Abstract: A method including sending a challenge from the vehicle to a remote driving station, wherein the challenge causes an input device control unit to apply at least one output signal to a circuitry; receiving in a vehicle a response from the remote driving station, wherein the response indicates at least one input signal received by the input device control unit from the circuitry in response to the applied at least one output signal; and determining, by a vehicle control unit of the vehicle, at least one of the state of a manually operable input device and whether the circuitry is faulty based on the sent challenge and the received response.