1. Introduction
The advent of the Industry 4.0 era has further accelerated the application of autonomous technologies in the transportation sector. Among these technologies, the Maritime Autonomous Surface Ship (MASS) guidance, as representative of autonomous applications in the maritime industry, is emerging as an inevitable trend for future developments (Zhou et al., Reference Zhou, Liu, Wang and Wu2021). The International Maritime Organisation (IMO) has categorised MASS into four degrees of autonomy (DoA) (Maritime Safety Committee (MSC), 2021): DoA1 – with automated processes and decision support (MASS-DoA1); DoA2 – remotely controlled ship with seafarers on board (MASS-DoA2); DoA3 – remotely controlled ship without seafarers on board (MASS-DoA3); and DoA4 – fully autonomous ship (MASS-DoA4). MASS shows significant potential in cutting operational costs and reducing human errors (Felski and Zwolak, Reference Felski and Zwolak2020; Luo et al., Reference Luo, Geng, Li and Yu2022). In recent years, extensive research and exploration have resulted in numerous achievements and advancements. In the last years, several autonomous ships have been put into sea trials and operational testing, as listed in Table 1.
Notably, these MASS trials possess different control modes, ranging from autonomous, remote and manual control (Table 1). These control modes correspond to different DoA (Ludvigsen and Sørensen, Reference Ludvigsen and Sørensen2016), which are designed to adapt to specific requirements and operational contexts. Among these autonomous ships, MASS-DoA2 has the most complex control-switching mechanisms (Liu et al., Reference Liu, Chu, Wu, Li, He, Zheng, Zhou and Li2022a). For instance, as a MASS-DoA2 enters open waters, it can operate in autonomous mode under the control of the Autonomous Navigation System (ANS). However, in an operational context of collision avoidance, if the decision by ANS is considered as unsuitable, the control may switch to remote control mode, signifying a decrease in DoA. When navigating into a port with heavy traffic, a lower DoA with human onboard control is typically employed. This changes of DoAs is referred to as ‘dynamic autonomy’ (Sheridan, Reference Sheridan2011; Burmeister et al., Reference Burmeister, Bruhn, Rødseth and Porathe2014; Ramos et al., Reference Ramos, Utne and Mosleh2019; Yang et al., Reference Yang, Utne, Sandøy, Ramos and Rokseth2020; Wu et al., Reference Wu, Yip, Yan and Guedes Soares2022), which brings extra navigational safety and regulatory challenges for operations of MASS (Zhou et al., Reference Zhou, Liu, Wang, Wu and Cui2020a; Zhang et al., Reference Zhang, Han, Zhang, Zhang, Zhang and Zhang2022a; Li et al., Reference Li, Chen, Hu, Xi and Guo2023a).
Researchers have analysed the impact of dynamic DoA and employed diverse methods to evaluate associated risks, primarily concentrating on remotely controlled ship without seafarers on board (MASS-DoA3) that operates at autonomous control mode (ACM), or remote control mode (RCM). Ramos et al. (Reference Ramos, Thieme, Utne and Mosleh2020a) conducted research on dynamic DoA changes and the human involvement in collision avoidance within MASS-DoA3 using hierarchical task analysis (HTA), and further introduced a human–system interaction in autonomy (H–SIA) method, combining event sequence diagrams (ESD) and concurrent task analysis (CoTA), to model and compare safety aspects across different DoA in MASS (Ramos et al., Reference Ramos, Thieme, Utne and Mosleh2020b). Yang et al. (Reference Yang, Zhou, Zhou, Zhang, Mu and Xu2024) proposed a three-phase framework to identify failure scenarios during the control-switching, integrating systems–theoretic process analysis (STPA), state machines, and sequentially timed events plotting (STEP) diagram, offering solutions to address significant challenges posed by the dynamic DoA for the MASS safe navigation. Zhang et al. (Reference Zhang, Zhang, Yao and Zhang2020) used a combination of the technique for human error rate prediction (THERP) and Bayesian networks (BNs) to develop a probabilistic model assessing the likelihood of human errors by Shore Control Centre (SCC) operators during emergency takeovers from autonomous to remote control. Bačkalov (Reference Bačkalov2020) explored the adaptability of the European inland waterway shipping regulatory framework concerning the takeover of autonomous inland vessels (AIVs) by SCC operators. Kari and Steinert (Reference Kari and Steinert2021) reviewed more than 50 articles, identifying 13 human factors that impact the supervision and remote-control performance of SCC operators. Wang et al. (Reference Wang, Chen, Wu, Wan and Yang2022) proposed a trust management scheme between the SCC operator and MASS to ensure cyber security during takeover. Guo and Utne (Reference Guo and Utne2022) carried out a risk assessment to offer decision support for SCC operators and establish safe takeover operational procedures. In the investigation of potential risks and causality in MASS, Li et al. (Reference Li, Oh, Zhou and Yuen2023b) discovered that the timely takeover of the vessel by SCC operators could effectively avoid collisions.
Compared to MASS-DoA3, MASS-DoA2 introduces an additional control agent: the seafarers onboard. This integration transfers control between the seafarers onboard and either the autonomous system or the SCC operator. Such dynamics increase the complexity and potential instability during control switching (Veitch and Alsos, Reference Veitch and Alsos2022; Cheng et al., Reference Cheng, Utne, Wu and Wu2023). The continuous involvement of both seafarers onboard and SCC operators in the control loop means that the risk of human errors persists (Zhang et al., Reference Zhang, Meng, Yang, Lyu, Zhou and Wang2022b; Yang et al., Reference Yang, Zhang, Lyu, Zhou, Wang and Ramezani2023). Without preventive measures for human errors and standardised procedures for human operations, there is an increased risk of accidents. Fan et al. (Reference Fan, Montewka and Zhang2022) developed a risk-based framework to compare the risks associated with the different control modes that involve three controllers of MASS in certain situations. Nonetheless, there have been few efforts to address these risks, particularly the gap in understanding control-switching mechanisms, in terms of operational details and underlying principles (Zhang et al., Reference Zhang, Zhang, Yao and Zhang2020; Cheng et al., Reference Cheng, Utne, Wu and Wu2023). This gap hinders effective modelling and risk analysis of control switching and presents challenges for maritime regulatory authorities in establishing standards and overseeing MASS navigation.
Therefore, the objective of this paper is to bridge this gap by proposing a framework for a MASS-DoA2 control-switching mechanism. This is achieved by reviewing relevant provisions regarding control switching within autonomous ship guidelines (ASGs) from various classification societies and implementing expert surveys among captains and researchers in related field. The paper contributes to a deep understanding of the MASS-DoA2 control-switching mechanism, and provides insights to regulatory authorities, designers and operators to ensure navigational safety.
The rest of the paper is structured as follows. Section 2 introduces the research process, the autonomous ships guidelines and expert survey methodology used in this research. Section 3 and Section 4 present the control-switching mechanisms extracted from the guidelines and findings from the questionnaires and expert interviews. Section 5 provides a discussion related to the key findings and their implications. Conclusions and the limitations of the current study are presented in Section 6.
2. Methods
2.1 Guidelines for autonomous ships
Autonomous shipping is a relatively new and rapidly developing field. IMO has been actively working on frameworks to integrate MASS into existing regulations (IMO, Reference IMO2018; Goerlandt, Reference Goerlandt2020). The MASS is required to achieve a safety level equivalent to conventional ships, without compromising the safety of people, property or the environment (Bureau Veritas (BV), 2019; Maritime Safety Committee (MSC), 2019; European Union, 2020; Det Norske Veritas, 2021). To address this, classification societies have developed and issued their respective ASGs. These guidelines aim to provide designers, manufacturers, shipowners and administrations with recommendations for designing, constructing, testing, certifying and operating MASS across different countries (Rødseth and Nordahl, Reference Rødseth and Nordahl2017; ClassNK, 2020; Russian Maritime Register of Shipping (RS), 2020; American Bureau of Shipping (ABS), 2022). They address the challenges of effectively integrating autonomous technologies into MASS development. Furthermore, they assist authorities in the supervision and legislation of MASS, helping to establish a statutory framework for its application.
Control switching, essential in MASS operations, is recommended to follow the relevant provisions in the guidelines to ensure safety and reliability (Goerlandt, Reference Goerlandt2020). These provisions not only guide the current operations of MASS but also influence upcoming legislative and regulatory changes in this sector (Issa et al., Reference Issa, Ilinca, Ibrahim and Rizk2022; Li and Seta, Reference Li and Seta2022). Thus, a systematic review of the provisions explores recommended control modes in various scenarios, laying the groundwork for developing a control-switching mechanism. For this purpose, the study has collected 15 ASGs from IMO, the Maritime Safety Administration of the People's Republic of China (China MSA) and eight international classification societies (Table 2), and investigated in-depth for provisions related to control switching, focusing on the following questions:
1. In what scenarios is human intervention required to take over the MASS during the voyage?
2. Which takeover agent should control the MASS in different scenarios?
3. What process should be followed when switching control between different takeover agents?
4. What is the priority of each takeover agent in controlling the MASS directly under any scenario?
2.2 Expert surveys
After thoroughly examining ASGs, it became evident that the existing guidelines merely outline recommended practices without clarifying their underlying principles. This lack of explanation makes it difficult to explore the essential working mechanisms of the control mode switch. Additionally, ASGs vary in their recommendations for control modes in identical operational situations, leading to potential confusion among practitioners. To address these discrepancies, this paper utilised expert surveys, a widely recognised method for investigating unresolved questions (Rindermann et al., Reference Rindermann, Becker and Coyle2016; Rindermann et al., Reference Rindermann, Becker and Coyle2017; Lehtola et al., Reference Lehtola, Montewka and Salokannel2020; Rindermann et al., Reference Rindermann, Becker and Coyle2020). These surveys were conducted in a semi-structured manner, combining questionnaires and interviews. The questionnaires initially collected experts' opinions on the outcomes of the ASGs review. Then, interviews were conducted to delve deeper into control-switching specifics, seeking to establish a consensus on the MASS-DoA2 control-switching mechanism. The insights gained from these surveys contribute to refining the control switching for MASS-DoA2.
The questionnaire assumed a MASS-DoA2 with three operational modes: manual control mode (MCM), RCM and ACM. The control process involved three controllers: the seafarer onboard, the remote operator at the SCC and the onboard autonomous navigation controller (ANC). The questionnaire used a four-level scoring system to reflect the strength of the experts' opinions: ‘Strongly Disagree’, ‘Disagree’, ‘Agree’, and ‘Strongly Agree’ (Schrum et al., Reference Schrum, Johnson, Ghuy and Gombolay2020; Botes et al., Reference Botes, Bruce and Cooke2023). These options were assigned numerical values of −1, −0 ⋅ 5, 0 ⋅ 5, and 1 to enhance the visualisation of overall expert opinions. Aggregating these values allowed for calculating the mean, offering a clear representation of the central tendency of expert opinions, as elaborated in reference (Göb et al., Reference Göb, McCollin and Ramalhoto2007). The detailed explanations are provided in Table 3.
Prior to analysing the results, the expertise was also assessed by considering the experts' knowledge and experience in the relevant fields (Trevelyan and Robinson, Reference Trevelyan and Robinson2015; Shang, Reference Shang2023). The expertise level of each expert, denoted as Cr, was calculated by the arithmetic mean of two factors: their proficiency and judgement basis for content evaluation (Ca) and their familiarity with the specific issue under consideration (Cs). Ca encompasses four dimensions: theoretical knowledge, professional experience, literature and intuition. These dimensions were assessed based on their impact and classified as significant, moderate, or minor. The Ca value was calculated as the sum of the weight indices provided in Table 4 (Zeng, Reference Zeng1996). And values of Cs are detailed in Table 5. The calculation formula for Cr is: $\textrm{Cr = }({\textrm{Ca + Cs}} )\textrm{/}2$, where a Cr value of 0 ⋅ 7 or higher is considered a satisfactory level of expertise (Zeng, Reference Zeng1996).
The questionnaire revealed that experts struggle to interpret MASS provisions without comprehensively understanding the context. Meanwhile, practitioners, especially captains of convention vessels, hold different views on specific provisions regarding control switching. To address these dependencies, interviews were conducted, aiming to delve into the reasoning behind the experts' opinions. In the interview, ambiguities of related provisions were thoroughly discussed with the interviewer for experts' insights and clarification. In addition, the rationale behind expert judgements was further explored. These insights also constitute a part of the essential findings in this study.
2.3 The research process
This study begins with a review of ASGs from IMO and various influential classification societies to collect and categorise provisions related to control switching among three controllers of MASS-DoA2, namely ANS, SCC operator and seafarer onboard, followed by a survey including both questionnaires and interviews to gather further insights and reasoning behind. The review and survey cover four main aspects: scenario, takeover agent, process and priority. By synthesising findings from the systematic review and expert surveys, a framework for MASS-DoA2 control-switching mechanism is developed. The detailed research process is shown in Figure 1.
3. Results from review of MASS – DoA2 control-switching provisions
3.1 Provisions for the control-switching scenarios
The term ‘control-switching scenario’ in this paper refers to the conditions that trigger control switching for MASS-DoA2. It encompasses situations ranging from standard navigation situations to exceptional circumstances affecting MASS's navigation safety. Changes in these scenarios may increase the complexity of navigation tasks, and pose challenges to the MASS's ability to manage complex tasks or maintain safety of MASS-DoA2 operations. Therefore, identifying scenarios requiring manual intervention, either from SCC operators or seafarers onboard, is crucial to understanding the control-switching mechanism and lays the groundwork for further exploration of related issues.
Analysis identified a total of 21 provisions related to control-switching scenarios (Table 6). Some provisions use broad term such as ‘when necessary’, suggesting that the scenarios may extend beyond the specific scenarios explicitly mentioned in the guidelines. The identified provisions address 11 different scenarios for MASS-DoA2 control switching, including entering/leaving port, berthing/unberthing, anchoring, navigating in a narrow channel, operating in extreme environments, deviating from course, encountering unidentified obstacles on course, autonomous collision avoidance violating COLREGs (International Regulations for Preventing Collisions at Sea) and dealing with system failures related to it (i.e. ANC, remote control system and engine failures).
3.2 Provisions for control takeover agent
In control-switching scenarios for MASS-DoA2, the control takeover agent is crucial as the command recipient within the control loop. The takeover agent must promptly recognise their responsibilities and execute the takeover in a timely and safe manner. This includes not only ‘accurately assum[ing] control in dynamic traffic scenarios (SAE International, 2014)’, but also managing subsequent tasks across different scenarios. For MASS – DoA2, potential takeover agents include the ANS, SCC operators and seafarers onboard.
The control switching is a primary form of human intervention in MASS autonomous navigation, highlighting the significance of human input within the MASS system. This study specifically targets scenarios identified by ASGs requiring control switching, which involves complex navigational conditions, challenging tasks and stringent safety requirements. These circumstances exceed the capabilities of MASS, leading to the need for manual intervention. Therefore, this section mainly explores the roles of SCC operators and seafarers onboard as takeover agents.
Altogether, 17 provisions related to takeover agents are summarised in Table 7. The table presents details from these provisions and outlines the roles of takeover agents in various control-switching scenarios. According to these guidelines, seafarers onboard are responsible for taking control in situations such as entering/leaving port, berthing/unberthing, anchoring, navigating in narrow channels, and in case of falure of autonomous systems, remote systems and engines. SCC operators, on the other hand, are expected to take over control in scenarios such as deviation from course, encountering unidentified obstacles on course, autonomous system failure and engine failure. However, these provisions lack specific guidelines for takeover agents in scenarios of ‘operating in extreme environment’ and ‘autonomous collision avoidance violating COLREGs’.
3.3 Provisions for control-switching process
The process of control switching involves the flow of command among different takeover agents. It constitutes the operational standards that both human operators and the MASS must adhere to for a successful transfer of control. This aspect is critical as it directly affects ship control and is a key component of human–system interaction within the MASS-DoA2 framework. Therefore, establishing standardised processes for MASS control switching is essential for ensuring operational safety. This includes facilitating a smooth transition of control and reducing the likelihood of human errors.
Table 8 outlines eight provisions related to the control-switching process as derived from ASGs. However, these provisions only provide a general outline of the process, without providing detailed insights into specific procedures or steps involved in the process.
3.4 Provisions for takeover priority
In the context of MASS-DoA2, takeover priority acts as a critical safeguard in the control-switching mechanism. It defines the precedence given to takeover agents to assert control over the ship under various circumstances. Given the immature and somewhat limited application of MASS technology, complex or unexpected scenarios may arise, leading to uncertainty about which agent should assume control. Moreover, in cases of failures, the transfer of control might deviate from standard procedures. Therefore, it is imperative to assign clear priorities to each takeover agent, ensuring they can take immediate control of the MASS when necessary.
This study has identified and analysed nine provisions related to the prioritisation in control switching (Table 9). Although these provisions vary in content, they collectively highlight consistent viewpoints among various classification societies regarding the priority among different takeover agents. Specifically, the consensus indicates that the priority of seafarers onboard supersedes SCC operators and autonomous systems, with SCC operators holding a higher priority than ANS.
3.5 Summary
Based on the thorough review of relevant provisions in the ASGs, a preliminary framework for the control-switching mechanism was developed. Current guidelines, constrained by the present development of MASS, do not provide extensive details on the control-switching processes. Nevertheless, there is a widely recognised consensus on the hierarchy of priority among different takeover agents. Figure 2 illustrates the interplay between various scenarios and the corresponding takeover agents. This visualisation forms the foundational reference for further expert surveys and discussions.
A particular provision (ID 2.5.4) recommends transferring control to the ANS in case of remote failure. This is significant as remote control system failures can surpass the capabilities of autonomous navigation. In this context, this paper proposes that seafarers onboard should be the designated takeover agents in remote failure scenarios, ensuring continuity and safety of navigation.
Notably, current provisions do not specifically identify takeover agents for scenarios involving ‘extreme environment’ and ‘autonomous collision avoidance violating COLREGs’. Additionally, notable discrepancies exist among various ASGs concerning the designated takeover agents for scenarios such as ‘System failures related to ANC’, ‘System failures related to remote control system’ and ‘General system failures and unexpected events’. These gaps and inconsistencies in the guidelines highlight areas that require further exploration and clarification. These issues, along with their implications for the control-switching mechanism in MASS-DoA2, will be addressed and analysed in detail in the expert survey, which is thoroughly discussed in Section 4 of this paper.
4. Expert survey for MASS – DoA2 control switching mechanism
4.1 Questionnaire results
The questionnaire designed for this study gathered insights from experts on the selection of takeover agents in 11 distinct control-switching scenarios as outlined in the ASGs. We received responses from 14 experts who have relevant expertise in this field. Their detailed opinions on the specified questions, along with comprehensive discussions about their individual perspectives, are presented in the interview section of this paper. This section offers an in-depth analysis of expert viewpoints, contributing valuable insights to the understanding of control-switching mechanisms in MASS-DoA2. Table 10 lists the background information of each expert, and Table 11 lists the expertise level of the respondents on this subject.
The expertise level serves as a metric to assess the proficiency of the respondents in the surveyed field, along with the reliability and applicability of their contributions. The analysis of the data in Table 11 yields an average credibility rating of $\mathrm{\bar{C}r\ =\ }0\cdot78 \pm 0\cdot06$ .The rating satisfies the criteria Cr ≥ 0 ⋅ 7, both from a collective and individual standpoint, indicating a satisfactory level of expertise. Consequently, the expertise levels in this survey are in line with the set requirements, providing a substantial degree of confidence in the reliability of the experts' opinions.
The results of the data analysis are listed in Table 12, and Figure 3 presents the overall stance of expert opinions. In this representation, positive values signify a general consensus among the experts, indicating agreement on the topics discussed. Conversely, negative values denote a divergence of opinions, pointing to disagreement. The absolute value, whether positive or negative, indicates the strength of this agreement or disagreement. Essentially, the larger the magnitude of the value, the more pronounced the level of concordance or discordance in the overall expert opinion.
The analysis of expert's opinion leads to the following conclusions:
1) There is a broad consensus among experts that, across various control-switching scenarios, seafarers onboard are capable of assuming control of MASS.
2) Experts generally agree that SCC operators are also capable of taking over control of MASS in most scenarios, with the exceptions of remote system failure and anchoring operation. However, the level of agreement for SCC operators taking over is lower compared to that for seafarers onboard.
3) The majority of experts believe that, in almost all the 11 control-switching scenarios outlined by ASGs – with the exceptions being the berthing/unberthing and extreme environment scenarios – it is essential to shift to human control of the MASS.
4.2 Results from the interview
The questionnaire, grounded in ASGs, yielded results that primarily reflect the collective perspectives of the experts. To provide more detailed and valuable theoretical contributions to the research on the MASS-DoA2 control-switching mechanism, this paper organised the insights proposed by the experts during the interviews. These insights, directly relevant to the core research areas of this study, serve as a basis for refining the framework of the control-switching mechanism.
1) Entering/leaving port – ASGs commonly state that MASS–DoA2 should have seafarers onboard responsible for navigation tasks when entering or leaving port. However, the overall consensus suggests that some experts believe that ship control can also be taken over by SCC operators during entering or leaving port. A professor with seafaring experience noted (anonymised quotes from the experts are part of results):
Entering and leaving port involves considerations such as port channel configurations, traffic flow conditions, local navigation rules and complying with VTS (vessel traffic systems) dispatch. With the support of electronic navigation information, remote control and communication technology, SCC operators may also be capable of remotely controlling MASS entering or leaving ports.
This perspective aligns with the provisions in ASGs concerning control switching for ‘uncrewed’ MASS. As MASS evolves, the responsibilities of seafarers onboard are not eliminated as ships become less manned or unmanned; instead, they are gradually shifted to SCC operators (Zhang et al., Reference Zhang, Zhang, Yao and Zhang2020). However, this viewpoint does not specifically address MASS-DoA2, and the performance of SCC operators in terms of the ‘equivalent safety principle’ (de Vos et al., Reference de Vos, Hekkenberg and Koelman2020; Zhou et al., Reference Zhou, Liu, Wang, Wu and Cui2020a) also remains unverified.
2) Berthing/unberthing – The responses revealed a range of opinions among experts about the capability of MASS-DoA2 to autonomously accomplish safe berthing and unberthing. Despite the diversity in viewpoints, there is a general trend toward agreement on this capability. To shed light on this perspective, a professor with extensive experience and captain qualifications provided an insightful explanation (specific comments from experts are anonymised for this study):
Some actual MASS, even though they are still in the testing and trail stages, are already capable of autonomously berthing and unberthing. Therefore, MASS–DoA2 with autonomous berthing and unberthing capabilities can perform these manoeuvres autonomously, instead of transferring the control to human operators.
Indeed, as this expert stated, MASS has made substantial progress in the field of autonomous berthing and unberthing (Tran and Im, Reference Tran and Im2012; Mizuno and Kuboshima, Reference Mizuno and Kuboshima2019; Nguyen, Reference Nguyen2019; Piao et al., Reference Piao, Guo and Sun2019). This advancement also paves the way for further research into the mechanisms of MASS control switching. In the subsequent sections, we delve deeper into the nuances of identifying appropriate takeover agents for berthing and unberthing scenarios, further elaborating on this aspect within the broader context of MASS control switching.
3) Anchoring – The results highlighted divergent expert opinions on the role of SCC operators as the takeover agent in the ‘anchoring’ scenario. The general trend among these responses leans towards disagreement with the idea of SCC operators managing the anchoring process. To provide context to this perspective, a chief officer with significant maritime practical experience shared his viewpoint (the expert's comments are anonymised as part of the study's confidentiality protocol):
After a vessel is anchored, it would experience swaying due to wind, current and seabed condition. Local VTS often requires an appropriate safety distance between anchored vessels. However, in ports with heavy traffic, the distance between anchored vessels during swaying can be less than 2 nautical miles. If a vessel drags anchor, the situation becomes extremely urgent. There is a need for further validation regarding the emergency response capabilities and reaction times of SCC operators, particularly in their ability to effectively handle scenarios such as anchoring.
The scenario described by this expert, though unique, raises important considerations. The expert's viewpoint indirectly reflects the necessity of takeover by seafarers onboard during anchoring, while also providing analytical insights for the functional design and operational management of the MASS anchoring process. This input is instrumental in shaping the approach towards enhancing MASS capabilities in complex maritime operations.
4) Extreme environment – The provision (Provision ID 1.2.1) addresses extreme environment scenarios on the autonomous functionality. It points out that such influences might result in the autonomous system being unable to ensure safe navigation (Korean Register (KR), 2022). During interviews, five experts highlighted that ‘extreme environment’ covers a range of situations, each requiring consideration of its specific context. One particularly notable viewpoint among these was as follows:
Extreme environment encompasses various situations. For example, during heavy winds and waves, crew members might be prone to human errors, implying that crew control may not be more stable than autonomous control. In cases of poor visibility, the performance of perception sensors might be compromised, leading to an incomplete perception of the situation. With seafarers onboard, additional measures such as adding lookouts or auditory watch can be employed to ensure safety. Hence, the control switching under various extreme environments must be categorically explored.
This focused analysis is vital to ensure that the control mechanisms in MASS are robust and reliable under a wide spectrum of challenging conditions. Indeed, extreme environments comprise various conditions, and their implications for control switching should be individually assessed rather than generalised. As highlighted by the expert, conditions such as ‘poor visibility’ can be seen as a representation of the adverse effects of environments on autonomous functionality. Furthermore, the situational awareness of the SCC operator also relies on performance of onboard equipment (Liu et al., Reference Liu, Aydin, Akyuz, Arslan, Uflaz, Kurt and Turan2022b; Li et al., Reference Li, Zhang, Han and Wan2023c). When the relevant functions of the autonomous system are restrained in adverse environments, the operation of the SCC operator may also be constrained. Therefore, in extreme environment scenarios that may impact the autonomy functionality of MASS-DoA2, it become necessary for seafarers onboard to take control of the ship.
5) Autonomous collision avoidance violating COLREGs – During the interviews, it was observed that not just the interviewed captains and chief officer but also other experts with navigation experience pointed out that executing avoidance manoeuvres that deviate from COLREGs is a frequent and common occurrence in practical navigation. This insight sheds light on the complexities of real-world navigation, where strict adherence to COLREGs might not always be feasible or optimal. One of the experts provided the following explanation:
Whether it concerns traditional vessels or MASS, it is vital to distinguish between deviating from the COLREGs and outright violating them. This distinction is crucial for both types of vessels that operate under the guidance of COLREGs.
‘Deviating from rule’ refers to situations where vessels take evasive manoeuvres that deviate from COLREGs in special circumstances to ensure navigational safety. In such cases, deviating from the specific stipulations of COLREGs can paradoxically be seen as an adherence to their overarching principle. These deviations are often necessary to ensure safety and are made in the spirit of the COLREGs, which fundamentally aim to prevent collisions and promote safe navigation. On the other hand, ‘violating the rule’ refers to situations where vessels intentionally disregard COLREGs without any valid justification. This is not permitted by the COLREGs and constitutes a violation of maritime regulations. This distinction between necessary deviations and outright violations is critical, particularly for the operational protocols of MASS, where adherence to maritime safety standards is paramount.
The results from the questionnaire reveal a preference among experts for SCC operators to take control in ‘violating’ scenarios. The design and operation of autonomous collision avoidance functions need to consider compatibility with COLREGs (Zhou et al., Reference Zhou, Huang, Wang, Wu and Liu2020b; Wróbel et al., Reference Wróbel, Gil, Huang and Wawruch2022). Therefore, any decision by the MASS to violate COLREGs can be regarded as an autonomous system failure. The selection of the appropriate takeover agent in scenarios involving autonomous system failures in MASS will be further elaborated in the upcoming sections.
6) System failures related to ANC & general system failures and unexpected events – The guidance provided in ASGs regarding the appropriate takeover agents for scenarios involving these two types of failures shows variability. To shed light on this issue, one of the experts offered a perspective based on the DoA framework:
For MASS-DoA2, the primary responsibility should be with the SCC operator, while seafarers onboard are envisaged to play a supporting or backup role. This aligns with the development goals of ‘less manned’ and ‘unmanned’ MASS. In scenarios involving higher DoA, such as DoA 3 and 4, where there are no seafarers onboard, the SCC operators must be equipped with the necessary capabilities to address and manage any unexpected failures.
Based on this perspective and in combination with the questionnaire results, we recommend that in autonomous system failure or engine failure scenarios, control should be transferred to SCC operators firstly, with seafarers onboard taking over if SCC operators are unable to manage.
7) Others – During the interview, experts shared numerous viewpoints based on their research backgrounds and practical experiences, which are also valuable for this study. For example, an associate professor specialising in autonomous ships pointed out:
The DoA forms the fundamental basis for control modes in MASS. It's one-sided to solely discuss control-switching mechanisms based on DoA. Instead, it is essential to consider the specific degrees of each autonomous function in different MASS and establish control-switching mechanisms that balance between common standards and the unique characteristics of each MASS system.
In the viewpoint of this expert, the DoA does not fully represent the autonomous capabilities of MASS. However, by the DoA, it is possible to determine how many control modes the MASS possesses. For instance, the ‘Zhifei Hao’ has the capability for manual control, remote control and autonomous control. With seafarers onboard, based on the IMO's definition of DoA, it could be categorised as an MASS-DoA2. However, trial results have shown its ability to autonomously berth and unberth (Luo et al., Reference Luo, Geng, Li and Yu2022; Xing and Zhu, Reference Xing and Zhu2023). In scenarios like berthing and unberthing, the need for seafarers onboard, and consequently for control switching, may not be necessary. Therefore, the research on MASS–DoA2 control-switching mechanisms should extend beyond just the DoA and carefully examine the specific autonomous functions of each MASS-DoA2 system.
5. Discussion
In the foreseeable future, an increasing number of MASS will be deployed for trials or commercial operations (Zhang et al., Reference Zhang, Zhang, Yao and Zhang2020; Zhang et al., Reference Zhang, Han, Zhang, Zhang, Zhang and Zhang2022a). This leads to a growing industry demand to establish regulations governing control switching in order to oversee MASS operations and to ensure navigational safety from a managerial perspective. Given the limited access to and the challenging nature of obtaining comprehensive MASS data for research purposes, this paper explores the control-switching mechanism through a review of ASGs and expert surveys. Consequently, it proposed a framework for the control-switching mechanism in MASS-DoA2, covering four key aspects: ‘scenarios, takeover agents, processes, and priorities’.
Figure 4 presents the framework developed in this paper synthesising findings from the four aspects previously stated. This framework initiates control switching based on changes in scenarios, placing the scenarios as the primary triggers. Each scenario correlates with specific takeover agents, who are aligned with different control modes, thereby establishing control modes as the key reference points in the framework.
To facilitate real-time awareness of the control mode by humans and ensure that only one agent controls the ship, the process varies according to the scenario and agents involved. Different coloured narrow lines represent the various processes among different takeover agents, aiming to reflect relevant provisions from ASGs on ‘processes’, such as initiating, notifying, confirming and taking over. Notably, apart from the scenario indicated by ASGs, seafarer onboard may take over from the SCC operator in case of accidents or failures preventing remote control, serving as a safety barrier. This process is depicted in Figure 4 by red dashed lines. And ‘Priority’ within this framework is illustrated using black dashed arrows, bypassing intermediate steps to highlight its direct and overriding nature in the control-switching mechanism. This representation underscores the importance of quickly establishing which agent has control in various scenarios, ensuring clarity and efficiency in the operation of MASS-DoA2.
5.1 Interpretation of the findings
The research has identified 11 control-switching scenarios, while acknowledging that the list is not exhaustive. The MASS-DoA2 considered in this study poses three operational modes controlled by three distinct agents: the ANS, the SCC operator and the seafarer onboard. This is to be aligned with the current state of most delivered MASS-DoA2 deployed for sea trial today, and the expectation that MASS-DoA2 is a transition phase leading towards more advanced level, such as MASS-DoA3 and MASS-DoA4.
The primary goal of this study is to develop practical control-switching mechanisms that adequately reflect these diverse operational modes. Therefore, it's important to recognise that the autonomy capabilities of MASS-DoA2 may extend beyond ‘open-water autonomous navigation’. Should MASS demonstrate proficiency in autonomously navigating in more intricate scenarios, it could necessitate revisions or more adaptable approaches within the ASGs.
The results of expert questionnaire consistently show a preference for seafarers onboard as the primary takeover agent. However, this consensus does not necessarily imply seafarers onboard should always be present and in control across all 11 identified scenarios. Rather, it reflects the experts' confidence in the ability of seafarers onboard to competently manage navigation tasks within these scenarios. Therefore, this paper recommends adhering to the guidance provided by the ASGs to in determining the appropriate takeover agents. Additionally, when a SCC operator encounters difficulties in handling navigation tasks after assuming control, the control should be transferred to onboard seafarers onboard to ensure the safety of MASS navigation. This approach helps maintain a balance between utilising the capabilities of autonomous systems and ensuring safe navigation through human expertise when necessary.
The existing guidelines and expert surveys reveal a gap in specific guidance regarding the control-switching processes for MASS-DoA2. This lack of detailed description has limited our efforts to develop a comprehensive framework for the MASS-DoA2 control-switching mechanism. While we have endeavoured to incorporate the existing provisions from the ASGs, it is clear that establishing in-depth standards for these processes will require more practical experience and empirical data from the field of MASS operation.
The perspectives on the takeover priority of MASS-DoA2 show remarkable consistency between the ASGs and the results of expert interviews. This priority within the mechanism empowers both seafarers onboard and SCC operators with the ability to assume direct control of the MASS, ensuring timely intervention when necessary. The established consensus on this hierarchy is clear: ‘Seafarers Onboard > SCC Operator > ANS’. This prioritisation reflects a strategic approach to ensuring the safety and effectiveness of MASS operations, recognising the critical role of human oversight in autonomous maritime navigation.
5.2 Implication of the framework
The concept of dynamic DoA provides MASS-DoA2 with the flexibility and safety needed to adapt to a wide range of navigational scenarios. Despite the growing interest and recognition of the importance of dynamic DoA and safe control switching among control agents, a standard control-switching mechanism has not yet been established. The framework presented in this paper aims to support the establishment of related regulatory standards, improve the design of MASS systems and contribute to ongoing research on the safety of human–system interactions.
On the one hand, the framework offers valuable reference for maritime regulatory authorities in the development of control-switching mechanisms. ASGs provide both instruction and constraints for the design, construction, testing, deployment and regulation of MASS, aiming to enhance safety and facilitate regulatory oversight. MASS is encouraged to comply with the provisions specified by respective ASGs. This study consolidates the common control-switching requirements from various ASGs, integrates the variations in provisions through expert surveys and proposes a framework that aligns with established maritime practices. Consequently, the framework demonstrates wide applicability across diverse MASS system and can significantly contribute to the establishment of control-switching mechanisms for MASS.
On the other hand, the framework presented in this study also has significant implications for the design of autonomous systems. As control-switching is a crucial component of human–system interaction, and system design must enable MASS to achieve smooth and safe control-switching. A comprehensive understanding of the control-switching mechanism is essential for optimising this functionality from a design perspective, ensuring compliance with international convention standards, and realising its intended functionality.
Moreover, a review of relevant literature reveals that prior research, while addressing control-switching, has not extensively explored the specific events or behaviours during the transition. This gap is attributed to the lack of unified regulations, which makes it challenging to conduct detailed analyses of human intervention. The framework proposed in this paper addresses this gap to some extent, allowing for a more focused assessments of human–system interactions. This contribution is significant for advancing research in this field, offering a foundation for future studies to build upon and enhancing the overall understanding and development of human–sys dynamtemics in maritime operations.
6. Conclusions
The development and application of autonomous technologies have significantly advanced the evolution of MASS, but achieving complete independence of ships from human intervention remains a subject that necessitates further exploration and experimentation. During navigation, different control modes can be alternately employed to address tasks that are challenging for autonomous functions to execute. This requires humans to promptly take over the ship during supervision and complete the transition of control. However, the industry has yet to establish control-switching standards. Therefore, this paper conducted research on the MASS-DoA2 control-switching mechanism through ASGs and expert surveys, proposing a framework covering four key aspects: scenarios, takeover agents, processes and priorities. This framework could serve as the foundation for studies related to dynamic DoA, and provide insights for regulatory authorities in establishing such mechanisms.
Several limitations must be addressed in the future. Due to the constraints arising from the limited number of operational cases and data for MASS-DoA2, along with a scarcity of references, the proposed mechanism framework requires further verification and refinement if necessary. Firstly, the influence of diverse extreme weather conditions on control-switching remains unclear. Subsequently, integrating maritime practices with MASS technology could be pursued to investigate their impacts on MASS components and overall system performance. This would contribute to establish control-switching guidelines for varying conditions, thereby refining and improving the control-switching mechanism. Secondly, the control-switching process requires clearer specifications. In the future, human reliability analysis (HRA) methods could be introduced to evaluate the reliability of both the SCC operator and seafarers during the switching process, providing basis for establishing control-switching procedures and standardising human behaviour. Thirdly, the practicality of the control-switching mechanism is a key consideration. It is necessary to investigate the applicability of the proposed control-switching mechanism to maritime regulations and regulatory systems based on relevant shipping codes. This would be beneficial to enhance the practical application value of the proposed control transition mechanism framework.
While the proposed framework begins to bridge the current gaps in understanding control-switching mechanisms, further enhancements through theoretical research and validations within the MASS domain. This continued effort will contribute to developing a more robust and practical control-switching mechanism. In future research, the focus should be on modelling and analysing MASS-DoA2 control-switching through risk analysis models and case studies, thereby enriching the understanding and effectiveness of this crucial aspect of MASS operations.
Funding
This study was supported by the National Natural Science Foundation of China (NSFC) (Grant No. 52201408, No. 52301416), and National Key R&D Program of China (Grant No. 2023YFB4302300).