Method and system of aircraft pilot assessment and for remedial action upon pilot impairment

• US 20080122636A1
• Filed: 05/22/2007
• Published: 05/29/2008
• Est. Priority Date: 03/24/2005
• Status: Active Grant

• Current Assignee: Karl F. Milde Jr
• Original Assignee: Karl F. Milde Jr
• Inventors: Matos, Jeffrey A.
• Granted Patent: US 8,289,172 B2
• Time in Patent Office: Days
• US Class Current: 340/576
• CPC Class Codes: A62B 99/00 Subject matter not provided for in other groups of this subclass
• CPC Class Codes: B64D 25/00 Emergency apparatus or devices, not otherwise provided for parachutes B64D17/00, B64D19/00; jettisoning of fuel tanks or fuel per se B64D37/00; specially adapted for protection against criminal attack, e.g. anti-hijacking systems B64D45/0015 ; safety belts or body harnesses in general A62B35/00; safety belts or body harnesses for land vehicles B60R22/00; jettisonable parts of fuselage facilitating emergency escape B64C
• CPC Class Codes: G08B 21/06 indicating a condition of sleep, e.g. anti-dozing alarms

Abstract

A method and system are disclosed for assessing the capability of a first person to operate a machine, such as an aircraft or other transport vehicle. The method includes the steps of:

• • (a) Sensing the value of at least one, and preferably two or more information parameters for assessing the fitness of the person operating the machine. The parameters include one or a combination of electroencephalogram information, electrocardiogram information, heart rate information, respiratory rate information, eye motion information, eyelid position information, eyelid motion information, expired gas mixture information, blood oxygen content information, blood oxygen saturation information and blood pressure information for the person operating the machine, and/or information about operation of the machine as well as information about actions taken by the person operating the machine.
  • (b) Determining whether at least one value of one information parameter is/are not within the range of values deemed to be acceptable for a capable person.
  • (c) Indicating when the at least one information parameter is/are not within the range of acceptable values, thereby indicating the person'"'"'s decreased fitness and ability to operate the machine.

Claims

1. A method for assessing the capability of a first person to operate a machine, said method comprising the steps of:

(a) sensing the values of at least two information parameters concerning said first person for assessing the fitness of said first person to operate said machine, said information parameters being selected from the group of parameters consisting of an electroencephalogram information parameter, an electrocardiogram information parameter, a heart rate information parameter, a respiratory rate information parameter, an eye motion information parameter, an eyelid position information parameter, an eyelid motion information parameter, an expired gas mixture information parameter, a blood oxygen content information parameter, a blood oxygen saturation information parameter, a blood pressure information parameter, an information parameter about said first person'"'"'s operation of said machine and an information parameter about at least one action of said first person;

(b) determining whether the value of at least one of said at least two information parameters is not within a range of values deemed to be acceptable for said first person, if said first person were capable of operating said machine; and

(c) indicating when said at least one value is not within said range of acceptable values, thereby indicating said first person'"'"'s decreased fitness to operate said machine.

3. The method defined in claim 1, wherein said machine is one whose improper operation may result in at least one of the loss of life, bodily injury, or damage to personal property and wherein said first person is selected from the group consisting of the operator of said machine, and another person on whom said operator is dependent for proper performance by said operator.

27. The method defined in claim 1, wherein said at least two information parameters comprise (a) at least one of (i) information about operation of said machine and (ii) information about actions of said first person, and (b) one other of said information parameters.

2. A method for assessing the capability of a first person to operate a machine, said method comprising the steps of:

(a) sensing the value of at least one information parameter concerning said first person for assessing the fitness of said first person to operate said machine, said at least one information parameter being selected from the group of parameters consisting of a physiologic information parameter for said first person;

an information parameter about said first person'"'"'s operation of said machine and an information parameter about at least one action of said first person;

(b) determining whether the values of said at least one information parameter is not within a range of values deemed to be acceptable for said first person, if said first person were capable of operating said machine; and

(c) indicating when said value of said at least one information parameter is not within said range of acceptable values, thereby indicating said first person'"'"'s decreased fitness to operate said machine.

4. The method defined in claim 2, wherein said machine is one whose improper operation may result in at least one of the loss of life, bodily injury, or damage to personal property and wherein said first person is selected from the group consisting of the operator of said machine, and another person on whom said operator is dependent for proper performance by said operator.

5. The method defined in claim 4, wherein said machine is an aircraft and wherein said first person is selected from the group consisting of a pilot, a co-pilot and a navigator of said aircraft.

6. The method defined in claim 4, wherein said machine is a transport vehicle selected from the group consisting of automobile, truck, train, tank and watercraft, and wherein said first person is the driver of said transport vehicle.

7. The method defined in claim 4, wherein said machine is a machine selected from the group consisting air-traffic control equipment, forklift, nuclear reactor, robotically controlled surgical device, farm equipment, assembly line equipment, construction equipment, mining equipment and demolition equipment and wherein said first person is the operator of said machine.

8. The method defined in claim 2, wherein the step of indicating said decreased fitness of said first person includes indicating said decreased fitness to one of said first person, and a second person.

9. The method defined in claim 2, wherein said value of said information parameter about said at least one action of said first person is obtained by prompting said first person by producing a stimulus for said first person, selected from the group consisting of visual stimulation, audible stimulation and tactile stimulation, and wherein step (b) comprises the step of analyzing said one value of said information parameter produced in response to said stimulus.

10. The method defined in claim 2, wherein said value of said information parameter about said person'"'"'s operation of said machine is obtained by evaluating said first person'"'"'s response to a machine condition which requires a response by said first person.

11. The method defined in claim 2, wherein said step of indicating said decreased fitness of said first person includes the step of generating an emergency condition signal and wherein said method further comprises the step of disabling control of said machine by said first person in response to said signal.

12. The method defined in claim 11, further comprising the step of enabling control of said machine by an alternate source of control in response to at least one of said signal and said second person.

13. The method defined in claim 12, wherein said alternate source of control includes at least one of an autopilot, a flight control system and an off-aircraft human pilot.

14. The method defined in claim 12, wherein said alternate source of control includes at least one of:

(1) automated equipment for operating said machine, said automated equipment attached to said machine;

(2) automated equipment for operating said machine, said automated equipment not attached to said machine;

(3) a second operator for operating said machine, said second operator located in proximity to said machine; and

(4) a second operator for operating said machine, said second operator not located in proximity to said machine.

15. The method defined in claim 14, wherein said automated equipment causes said machine to enter an idle state, whereby said idle state temporarily suspends machine operation.

16. The method defined in claim 2, wherein said step of indicating said decreased fitness of said first person includes the steps of (1) indicating a first level of decreased fitness when said value of said information parameter is within a first range of values, deemed to demonstrate that said first person has decreased fitness but that said first person'"'"'s capability remains adequate for operating said machine, and (2) indicating a second level of decreased fitness when said value of said at least one information parameter is within a second range of values, deemed to demonstrate that said first person'"'"'s capability is inadequate for operating said machine.

17. The method defined in claim 9, wherein said value of said information parameter produced in response to said stimulus must occur within a prescribed amount of time to be considered acceptable.

18. The method defined in claim 9, wherein said value of said information parameter about said action taken by said first person is obtained by prompting said first person to perform at least one action selected from the group consisting of:

(1) speaking at least one word, (2) typing at least one keystroke on a keyboard, (3) altering the position of at least one switch, and (4) changing the position of at least one body part of said first person, and wherein said step (b) consists of analyzing said value to determine whether it is not within the range of values deemed acceptable.

19. The method defined in claim 9, wherein step (a) comprises the step of detecting an electroencephalographic evoked response to said stimulus and wherein step (b) consists of analyzing said evoked response.

20. The method defined in claim 18, wherein said body part is a head of said first person and said action of changing said position includes nodding the head.

21. The method defined in claim 9, wherein said visual, audible and tactile stimulation are selected from the group consisting of a flashing light, an audible tone, a mechanical impulse to a body part and an electrical shock to a body part of said first person.

22. The method defined in claim 2, wherein said at least one physiologic information parameter is electroencephalogram information.

23. The method defined in claim 2, wherein said at least one physiologic information parameter is at least one of electrocardiogram information, heart rate information and respiratory rate information.

24. The method defined in claim 2, wherein said at least one physiologic information parameter is at least one of eye motion information, eyelid position information and eyelid motion information.

25. The method defined in claim 2, wherein said at least one physiologic information parameter is at least one of expired gas mixture information, blood oxygen content information and blood oxygen saturation information.

26. The method defined in claim 2, wherein said at least one physiologic information parameter is blood pressure information.

28. Apparatus for assessing the capability of a first person to operate a machine, said method comprising, in combination:

(a) means for sensing the values of at least two information parameters concerning said first person for assessing the fitness of said first person to operate said machine, said information parameters being selected from the group of parameters consisting of an electroencephalogram information parameter, an electrocardiogram information parameter, a heart rate information parameter, a respiratory rate information parameter, an eye motion information parameter, an eyelid position information parameter, an eyelid motion information parameter, an expired gas mixture information parameter, a blood oxygen content information parameter, a blood oxygen saturation information, a blood pressure information parameter, an information parameter about said first person'"'"'s operation of said machine and an information parameter about at least one action of said first person;

(b) means for determining whether the value of at least one of said at least two information parameters is not within a range of values deemed to be acceptable for said first person, if said first person were capable of operating said machine; and

(c) means for indicating when said at least one value is not within said range of acceptable values, thereby indicating said first person'"'"'s decreased fitness to operate said machine.

30. The apparatus defined in claim 28, wherein said machine is one whose improper operation may result in at least one of the loss of life, bodily injury, or damage to personal property and wherein said first person is selected from the group consisting of the operator of said machine, and another person on whom said operator is dependent for proper performance by said operator.

54. The apparatus defined in claim 28, wherein said at least two information parameters comprise (a) at least one of (i) information about operation of said machine and (ii) information about actions of said first person, and (b) one other of said information parameters.

29. Apparatus for assessing the capability of a first person to operate a machine, said apparatus comprising:

(a) means for sensing the value of at least one information parameter concerning a first person for assessing the fitness of said first person to operate said machine, said at least one information parameter being selected from the group of parameters consisting of a physiologic information parameter for said first person;

an information parameter about said first person'"'"'s operation of said machine and an information parameter about at least one action of said first person;

(b) means for determining whether the values of said at least one information parameter is not within the range of values deemed to be acceptable for said first person, if said first person were capable of operating said machine; and

(c) means for indicating when said value of said at least one information parameter is not within said range of acceptable values, thereby indicating said first person'"'"'s decreased fitness to operate said machine.

31. The apparatus defined in claim 29, wherein said machine is one whose improper operation may result in at least one of the loss of life, bodily injury, or damage to personal property and wherein said first person is selected from the group consisting of the operator of said machine, and another person on whom said operator is dependent for proper performance by said operator.

32. The apparatus defined in claim 31, wherein said machine is an aircraft and wherein said first person is selected from the group consisting of a pilot, a co-pilot and a navigator of said aircraft.

33. The apparatus defined in claim 31, wherein said machine is a transport vehicle selected from the group consisting of automobile, truck, train, tank and watercraft, and wherein said first person is the driver of said transport vehicle.

34. The apparatus defined in claim 31, wherein said machine is a machine selected from the group consisting air-traffic control equipment, forklift, nuclear reactor, robotically controlled surgical device, farm equipment, assembly line equipment, construction equipment, mining equipment and demolition equipment and wherein said first person is the operator of said machine.

35. The apparatus defined in claim 29, wherein said means for indicating said decreased fitness of said first person includes means for indicating said decreased fitness to one of said first person, and a second person.

36. The apparatus defined in claim 29, wherein said value of said information parameter about said at least one action of said first person is obtained by prompting said first person by producing a stimulus for said first person, selected from the group consisting of visual stimulation, audible stimulation and tactile stimulation, and means (b) comprises means for analyzing said one value of said information parameter produced in response to said stimulus.

37. The apparatus defined in claim 29, wherein said value of said information parameter about said person'"'"'s operation of said machine is obtained by evaluating said first person'"'"'s response to a machine condition which requires a response by said first person.

38. The apparatus defined in claim 29, wherein said means for indicating said decreased fitness of said first person includes means for generating an emergency condition signal and wherein said apparatus further comprises means for disabling control of said machine by said first person in response to said signal.

39. The apparatus defined in claim 38, further comprising means for enabling control of said machine by an alternate source of control in response to at least one of said signal and said second person.

40. The apparatus defined in claim 39, wherein said alternate source of control includes at least one of an autopilot, a flight control system and an off-aircraft human pilot.

41. The apparatus defined in claim 39, wherein said alternate source of control includes at least one of:

(1) automated equipment for operating said machine, said automated equipment attached to said machine;

(2) automated equipment for operating said machine, said automated equipment not attached to said machine;

(3) a second operator for operating said machine, said second operator located in proximity to said machine; and

(4) a second operator for operating said machine, said second operator not located in proximity to said machine.

42. The apparatus defined in claim 41, wherein said automated equipment causes said machine to enter an idle state, whereby said idle state temporarily suspends machine operation.

43. The apparatus defined in claim 29, wherein said means for indicating said decreased fitness of said first person includes means for (i) indicating a first level of decreased fitness when said value of said information parameter is within a first range of values deemed to demonstrate that said first person has decreased fitness but that said first person'"'"'s capability remains adequate for operating said machine, and (ii) indicating a second level of decreased fitness when said value of said at least one information parameter is within a second range of values deemed to demonstrate that said first person'"'"'s capability is inadequate for operating said machine.

44. The apparatus defined in claim 36, wherein said value of said information parameter produced in response to said stimulus must occur within a prescribed amount of time to be considered acceptable.

45. The apparatus defined in claim 36, wherein said value of said information parameter about said action taken by said first person is obtained by prompting said first person to perform at least one action selected from the group consisting of:

(1) speaking at least one word, (2) typing at least one keystroke on a keyboard, (3) altering the position of at least one switch, and (4) changing the position of at least one body part of said first person, and wherein means (b) comprises means for analyzing said value to determine whether it is not within the range of values deemed acceptable.

46. The apparatus defined in claim 36, wherein means (a) comprises means for detecting an electroencephalographic evoked response to said stimulus and wherein means (b) comprises means for analyzing said evoked response.

47. The apparatus defined in claim 45, wherein said body part is a head of said first person and said action of changing said position includes nodding the head.

48. The apparatus defined in claim 36, wherein said visual, audible and tactile stimulation are selected from the group consisting of a flashing light, an audible tone, a mechanical impulse to a body part and an electrical shock to a body part of said first person.

49. The apparatus defined in claim 29, wherein said at least one physiologic information parameter is electroencephalogram information.

50. The apparatus defined in claim 29, wherein said at least one physiologic information parameter is at least one of electrocardiogram information, heart rate information and respiratory rate information.

51. The apparatus defined in claim 29, wherein said at least one physiologic information parameter is at least one of eye motion information, eyelid position information and eyelid motion information.

52. The apparatus defined in claim 29, wherein said at least one physiologic information parameter is at least one of expired gas mixture information, blood oxygen content information and blood oxygen saturation information.

53. The apparatus defined in claim 29, wherein said at least one physiologic information parameter is blood pressure information.

55. A method for monitoring the capability of a first person to operate a machine and for taking remedial action in response thereto, said method comprising the steps of:

(a) repeatedly sensing at least one information parameter concerning said first person for assessing the fitness of said first person to operate said machine, said information parameter being selected from the group of physiologic information parameters consisting of an electroencephalogram information parameter, an electrocardiogram information parameter, a heart rate information parameter, a respiratory rate information parameter, an eye motion information parameter, an eyelid position information parameter, an eyelid motion information parameter, an expired gas mixture information parameter, a blood oxygen content information parameter, a blood oxygen saturation information parameter and a blood pressure information parameter;

(b) repeatedly calculating a first value as a function of at least one said information parameters;

(c) determining whether said first value is, or is not within a first range of values deemed to be acceptable for said first person, if said first person were capable of operating said machine;

(d) disabling control of said machine by said first person when said first value is not within said first range of acceptable values.

56. The method defined in claim 55, wherein the first value is a current value of said at least one physiologic information parameter at any given time.

57. The method defined in claim 55, wherein the first value is an average of values of said at least one physiologic information parameter over a prescribed interval of time.

58. The method defined in claim 55, wherein the first value is dependent on the rate of change of values of at least one of said physiologic information parameters over a prescribed period of time.

59. The method defined in claim 55, further comprising the steps of repeatedly calculating a second value as a second function of at least one of said information parameters;

determining whether said second value is, or is not within a second range of values deemed to be acceptable for said first person, if said first person were capable of operating said machine; and

restoring control of said machine by said first person when said second value is within said second range of acceptable values.

60. The method defined in claim 59, wherein the second value is a current value of said at least one physiologic information parameter at any given time.

61. The method defined in claim 59, wherein the second value is an average of values of said at least one physiologic information parameter over a prescribed interval of time.

62. The method defined in claim 59, wherein the second value is dependent on the rate of change of values of at least one of said physiologic information parameters over a prescribed period of time.

63. The method defined in claim 59, wherein said second range of values is different from said first range of values, said second value within said second range of values indicating a higher degree of fitness to operate the machine than said first value within said first range of values.

64. A method for assessing the capability of a first person to operate a machine, and for taking remedial action in response to a lack thereto, said method comprising the steps of:

(a) repeatedly sensing the value of at least one information parameter for assessing the fitness of said first person to operate said machine, said at least one information parameter being selected from the group of parameters consisting of at least one physiologic information parameter for said first person;

at least one information parameter about said first person'"'"'s operation of said machine and at least one information parameter about at least one action of said first person;

(b) repeatedly calculating a first value as a function of a first of said at least one information parameter;

(c) determining whether said first value is within a first range of values deemed to be acceptable for machine operation by said first person, if said first person were capable of operating said machine;

(d) disabling control of said machine by said first person when said first value is not within said first range of values deemed to be acceptable for machine operation by said first person; and

(e) restoring control of said machine by said first person when said first value is within a second range of values deemed to be acceptable for machine operation by said first person.

65. The method defined in claim 64, wherein said second range of values is different from said first range of values, said second value within said second range of values indicating a higher degree of fitness to operate the machine than said first value within said first range of values.

66. The method defined in claim 64, wherein said second range of values is equal to said first range of values.

67. The method defined in claim 64, further comprising the steps of calculating a second value as a second function of said at least one information parameter;

determining whether said second value is within a third range of values deemed to be acceptable for machine operation by said first person, if said first person were capable of operating said machine; and

disabling control of said machine by said first person when at least one of said first value is not within said first range of values deemed to be acceptable for machine operation by said first person and said second value is not within said third range of values deemed to be acceptable for machine operation by said first person.

68. The method defined in claim 67, further comprising the step of restoring control of said machine by said first person when both said first value is within said second range of values deemed to be acceptable for machine operation by said first person, and said second value is within a fourth range of values deemed to be acceptable for machine operation by said first person.

69. The method defined in claim 68, wherein

(i) said second range of values is different from said first range of values, said second range of values indicating a higher degree of fitness to operate the machine than said first range of values;

and

(ii) said fourth range of values is different from said third range of values, said fourth range of values indicating a higher degree of fitness to operate the machine than said third range of values.

70. The method defined in claim 68, wherein

(i) said second range of values is equal to said first range of values;

and

(ii) said fourth range of values is equal to said third range of values.

71. The method defined in claim 68, wherein at least one of said first and said third range of values is variable in dependence upon at least one of said first and second values.

72. The method defined in claim 67, wherein said second value is calculated and the subsequent steps of the method of claim 65 are carried out when said first value is not within a third range of values deemed to be acceptable for machine operation by said first person.

73. The method defined in claim 72, wherein said second value is a function of an information parameter about at least one action of said first person.

74. The method defined in claim 73, wherein at least one of said action of the first person is a response to a prompt.

75. The method defined in claim 64, wherein said at least one information parameter includes a physiologic information parameter selected from the group consisting of an electroencephalogram information parameter, an electrocardiogram information parameter, a heart rate information parameter, a respiratory rate information parameter, an eye motion information parameter, an eyelid position information parameter, an eyelid motion information parameter, an expired gas mixture information parameter, a blood oxygen content information parameter, a blood oxygen saturation information parameter, and a blood pressure information parameter.

76. The method defined in claim 75, further comprising the steps of calculating a second value as a second function of said at least one physiologic information parameters;

determining whether said second value is within a third range of values deemed to be acceptable for machine operation by said first person, if said first person were capable of operating said machine; and

disabling control of said machine by said first person when both said first value is not within said first range of values deemed to be acceptable for machine operation by said first person and said second value is not within said third range of values deemed to be acceptable for machine operation by said first person.

77. A method for assessing the capability of a first person to operate a machine, and for taking remedial action in response to a lack thereto, said method comprising the steps of:

(a) repeatedly sensing the value of at least one information parameter for assessing the fitness of said first person to operate said machine, said at least one information parameter being selected from the group of parameters consisting of at least one physiologic information parameter for said first person;

at least one information parameter about said first person'"'"'s operation of said machine and at least one information parameter about at least one action of said first person;

(b) repeatedly calculating a first value as a function of said at least one information parameter;

(c) determining whether the first value is within a first range of values deemed to be acceptable for machine operation by said first person, if said first person were capable of operating said machine;

(d) disabling control of said machine by said first person when said first value is not within said first range of values deemed to be acceptable for machine operation by said first person for a first duration of time; and

(e) restoring control of said machine by said first person when said first value is within said first range of values deemed to be acceptable for machine operation by said first person for a second duration of time.

78. The method defined in claim 77, wherein said second duration equals said first duration.

79. The method defined in claim 77, wherein said second duration exceeds said first duration.

80. The method defined in claim 77, wherein at least one of said information parameters is a physiologic information parameter and said first value is an average of values of said physiologic parameter over a prescribed period of time.

81. The method defined in claim 80, wherein said second duration exceeds said first duration.

82. The method defined in claim 80, wherein said second duration equals said first duration.

83. A method for assessing the capability of a first person to operate a machine, and for taking remedial action in response to a lack thereto, said method comprising the steps of:

(a) repeatedly sensing the value of at least one information parameter for assessing the fitness of said first person to operate said machine, said at least one information parameter being selected from the group of parameters consisting of at least one physiologic information parameter for said first person;

at least one information parameter about said first person'"'"'s operation of said machine and at least one information parameter about at least one action of said first person;

(b) repeatedly calculating a first value as a function of said at least one information parameter;

(c) determining whether the first value is within a first range of values deemed to be acceptable for machine operation by said first person, if said first person were capable of operating said machine;

(d) disabling control of said machine by said first person, for the first time, when said first value is not within said first range of values deemed to be acceptable for machine operation by said first person;

(e) restoring control of said machine by said first person when said first value is within a second range of values deemed to be acceptable for machine operation by said first person; and

(f) disabling control of said machine by said first person, after the first time, when said first value is not within a third range of values deemed to be acceptable for machine operation by said first person, wherein said third range of values corresponds to a greater degree of first person fitness to operate said machine than the first person fitness corresponding to said first range of values.

84. A method for assessing the capability of a first person to operate a machine, and for taking remedial action in response to a lack thereto, said method comprising the steps of:

(a) repeatedly sensing the value of at least one information parameter for assessing the fitness of said first person to operate said machine, said at least one information parameter being selected from the group of parameters consisting of at least one physiologic information parameter for said first person;

at least one information parameter about said first person'"'"'s operation of said machine and at least one information parameter about at least one action of said first person;

(b) repeatedly calculating a first value as a function of said at least one information parameter;

(c) determining whether the first value is within a first range of values deemed to be acceptable for machine operation by said first person, if said first person were capable of operating said machine;

(d) disabling control of said machine by said first person, for the first time, when said first value is not within said first range of values deemed to be acceptable for machine operation by said first person for a first duration of time;

(e) restoring control of said machine by said first person when said first value is within a first range of values deemed to be acceptable for machine operation by said first person; and

(f) disabling control of said machine by said first person, after the first time, when said first value is not within a second range of values deemed to be acceptable for machine operation by said first person, for a second duration of time, wherein said second range of values corresponds to a greater degree of first person fitness to operate said machine than the first person fitness corresponding to said first range of values.

85. The method defined in claim 84, wherein said second duration equals said first duration.

86. The method defined in claim 84, wherein said first duration exceeds said second duration.

87. A method for assessing the capability of a first person to operate a machine, and for taking remedial action in response to a lack thereto, said method comprising the steps of:

(a) repeatedly sensing the value of at least one information parameter for assessing the fitness of said first person to operate said machine, said at least one information parameter being selected from the group of parameters consisting of at least one physiologic information parameter for said first person;

at least one information parameter about said first person'"'"'s operation of said machine and at least one information parameter about at least one action of said first person;

(b) repeatedly calculating a first value as a function of said at least one information parameter;

(c) determining whether the first value is within a first range of values deemed to be acceptable for machine operation by said first person, if said first person were capable of operating said machine;

(d) disabling control of said machine by said first person, for the first time, when said first value is not within said first range of values deemed to be acceptable for machine operation by said first person;

(d) determining whether the first value is within a second range of values deemed to be acceptable for machine operation by said first person, if said first person were capable of operating said machine, wherein said second range of value corresponds to a greater degree of first person fitness to operate said machine than the first person fitness corresponding to said first range of values;

(e) restoring control of said machine by said first person when said first value is within said second range of values; and

(g) disabling control of said machine by said first person, after the first time, when said first value is not within a third range of values deemed to be acceptable for machine operation by said first person, wherein said third range of values corresponds to a greater degree of first person fitness to operate said machine than the first person fitness corresponding to said first range of values and said third range of values corresponds to a lesser degree of first person fitness to operate said machine than the first person fitness corresponding to said second range of values.