Safety LiDAR for AMR Fleets — Multi-Vehicle Traffic, Speed-Dependent Field Switching and Cross-Vehicle Interference

A single AMR is a tractable safety problem. The vehicle has a protective field in the direction of travel, the field tracks stopping distance through speed-dependent switching, the scanner is certified, the standards are clear. Get that right and the robot does not strike the person in front of it.

A fleet of AMRs is a different problem. The 2025–2026 wave of large deployments — fulfilment centres running well over a hundred vehicles in one building, automotive plants with AMR convoys feeding line-side, electronics factories blending conveyors and free-roaming robots — has surfaced safety questions that simply do not exist at five-vehicle scale. This article is about those.

What changes when you go from one vehicle to many

Recheck the vehicle safety case against the shared operating environment. Added traffic, occlusions and route rules can introduce conditions not covered by the original single-vehicle validation.

• Vehicles can meet. Two AMRs at an intersection, two AMRs nose-to-nose in a narrow aisle, one AMR approaching another that is docked — none of these geometries exist with a single robot, and each one is a new safety scenario.
• Scanners share the optical environment. Two pulsed time-of-flight scanners looking into the same volume can interact. With one vehicle there is no peer; with fifty, peer interactions happen constantly.
• The fleet manager becomes load-bearing. Routing, zone allocation and intersection arbitration shift from heuristics to deterministic rules that the safety case starts to depend on.
• The wireless link matters. Whether the fleet rides on a private 5G slice, a Wi-Fi 6 deployment or older Wi-Fi 5 directly affects how quickly speed-zone changes propagate and how often vehicles fall back to safe-state.
• Emergent behaviour appears. Cascading slowdowns, clusters around a failed unit, oscillations between two valid routings — behaviours that only manifest at population scale.

Cross-vehicle scanner interference

A safety laser scanner measures distance by emitting a short laser pulse and timing the reflection. The fundamental assumption is that the pulses arriving at the receiver were emitted by the same scanner that is currently listening. With one scanner in a room, that assumption holds trivially. With ten scanners on ten different vehicles passing each other in the same aisle, there is a real probability that pulses from a peer arrive during another scanner’s receive window.

A misread interfering pulse can do one of two things. The benign outcome is that the device’s plausibility checks discard it — the pulse pattern does not match, the temporal signature is wrong, the measurement is rejected. The undesirable outcome is a nuisance stop, where the scanner treats noise as an object and triggers an unnecessary halt. The dangerous outcome — a peer pulse being misread as a closer return that masks a real obstacle — is what certified scanners are explicitly designed not to allow, through redundancy, plausibility and self-test under IEC 61496-3.

How modern scanners mitigate it

The mitigation strategies have converged on a few approaches, which are usually combined:

• Pulse-pattern modulation. Each scanner emits a modulated pulse pattern — varying inter-pulse timing, grouping, or coding — that it then expects to see echoed back. Pulses that do not match the expected pattern are discarded as noise.
• Scan-phase offset. The scanner offsets the angular phase of its scan when it detects interference, stepping the timing of when it looks in any given direction. Two adjacent scanners that drift into phase eventually drift out again, and interference becomes intermittent rather than sustained.
• Multi-pulse plausibility. The scanner requires multiple consecutive scans to agree before triggering a protective response, so a single stray pulse cannot cause a stop on its own. The trade-off is response time — more scans means more latency — which the design has to balance against the stopping-distance budget.
• Time-division and hardware sync. For tightly spaced scanners on the same vehicle, or fixed-infrastructure scanners at a single station, a hardware sync wire can ensure scanners take turns. Across a roaming fleet this is harder, but some deployments use wireless time-sync to keep populations of scanners loosely coordinated.

Interference countermeasures and residual behavior are model-specific. An unexplained stop is a diagnostic event to investigate, not proof that mitigation is working. Log the active field, neighboring vehicles, environment and fault code before changing settings.

Speed-zone synchronisation through the fleet manager

The single-vehicle picture has the scanner switching field sets based on the vehicle’s measured speed and steering angle. The fleet picture adds a layer above that: the fleet manager knows which zone the vehicle is in — an open aisle, a pedestrian crossing, a slow zone in front of a workstation, a docking lane — and informs the vehicle accordingly.

In a typical deployment the fleet manager sends the vehicle a zone identifier over the wireless link. The vehicle’s control system uses that identifier to enforce a top speed, adjust route planning, and request a corresponding field-set change from the scanner via the safety controller. The scanner itself, however, does not blindly trust the wireless signal: its field set is only switched when the on-vehicle safety chain — the speed signal, the steering signal, and any discrete safety inputs — agrees the change is safe.

Why the wireless choice matters

Measure coverage, roaming, congestion, packet loss and latency under the planned fleet load. Wi-Fi generation or private 5G alone does not guarantee deterministic delivery or eliminate handoff failures. Test communication loss and stale messages rather than using a network label as the acceptance criterion.

The point worth being clear on: none of this changes where the safety responsibility sits. A private 5G slice is not a safety-rated network in the IEC 61784-3 sense. It just reduces the rate at which the on-vehicle safety chain has to fall back to safe-state because it lost contact. Better wireless gives you a fleet that nuisance-stops less; it does not give you the ability to push safety functions off the vehicle and onto the network.

Blended traffic — people, AGVs, AMRs in the same aisle

Most real warehouse and factory floors are mixed. Pedestrians on foot, manually driven forklifts and tugger trains, a fleet of AMRs running fulfilment routes, a smaller fleet of AGVs serving fixed line-side stations, and occasionally a piece of mobile maintenance equipment all share the floor. The AMR’s own safety scanner protects against the AMR striking a person ahead of it. It does nothing about:

• A forklift striking the AMR (or a person near it).
• A pedestrian stepping out from between racking into the side of a moving AMR.
• Two AMRs meeting at a blind corner the fleet manager mis-allocated.
• A load on the AMR overhanging or extending above the scanner plane.

The competent response is to treat the floor as a system, not just the vehicle. Segregated lanes where the layout allows. Floor markings that match what the AMR routes actually do, so pedestrians have a reliable mental model. Warning fields tuned to give people real reaction time, not just stopping distance plus zero. Conservative speeds in shared zones, enforced by suitable safety functions wherever the risk assessment depends on that speed limit. Good sightlines at intersections, supplemented by fixed-infrastructure scanners or light curtains where the vehicle-borne field cannot see far enough.

Intersection and crossing rules

Intersection management in a fleet is, almost always, the fleet manager’s job rather than the individual vehicle’s. The fleet manager treats each crossing as a resource: only one vehicle holds the resource at a time, others are queued, and the held vehicle releases the resource on exit. Priority is by route, time-in-queue, or sometimes payload urgency.

The on-vehicle safety scanner remains the last line. If a traffic rule is wrong, a vehicle is mis-positioned, or a pedestrian crosses the AMR lane unexpectedly, the scanner still triggers the protective stop. That last point matters: AMR routes that cross pedestrian walkways should not rely on traffic-rule discipline to keep people safe. Either segregate the route physically, or add fixed-infrastructure protection — an area scanner mounted to the building covering the crossing — that operates independently of any vehicle.

Dock and charge-station approaches

Docks and chargers are a special case because the vehicle is deliberately approaching a fixed object. A protective field sized for aisle travel would prevent the approach from ever completing — the dock face is well inside the field before the vehicle is in position. The pattern that works is a dedicated slow-approach field set:

• Activated only when the fleet manager confirms the vehicle is in a docking sequence, and the on-vehicle speed signal confirms speed is below a low-speed threshold (typically 0.3 m/s or so, but the threshold has to be justified by stopping-distance analysis at that speed).
• Sized for the short stopping distance at that low speed, with a minimal protective field forward of the bumper and a corresponding warning field beyond it.
• Geometry-aware: if the dock has known fixed obstacles in the field, those need to be either tolerated by the field shape or muted explicitly — never quietly turned off.
• De-activated automatically when the vehicle leaves the docking sequence, with the normal aisle field sets returning before any acceleration is permitted.

The most common shortcut at docks is to mute the protective field entirely once the vehicle is “close”. Do not do this. A person can still walk into the dock area, and the vehicle should still detect them, at least at short range.

The standards landscape

Fleet-scale safety sits under the same standards a single vehicle does, but they all read more demandingly:

The R15.08 standards guide separates robot-level requirements from system/application integration. Confirm publication status before specifying an additional part. For vehicle detection-distance design, use the ISO 3691-4 field-design guide; the AGV/AMR safety-scanner introduction covers the underlying architecture.

Single-vehicle vs fleet — what the engineer has to add

Validation: testing a fleet is not testing one robot fifty times

The most common validation mistake on fleet projects is to test individual vehicles thoroughly and then declare the fleet tested. It is not the same. A vehicle works as expected in isolation and still produces an emergent failure when fifty of its peers are interacting with the same traffic manager. The additional validation tasks a fleet brings include:

• Population-level scenarios. Run the fleet at the design population, not at a comfortable subset, and observe whether the safety functions still behave as intended — particularly under load surges, during shift handovers, and when one or two units fail and the rest re-route around them.
• Wireless failure injection. Deliberately drop access points, kill the fleet-manager link, or inject latency, and verify the vehicles fall back to safe-state cleanly and recover sensibly.
• Cross-vehicle interference observation.Monitor the rate of unexplained nuisance stops over a sustained period — days, not minutes. A sudden spike is usually a fleet of similar new scanners that have ended up phase-aligned and need their modulation patterns re-shuffled.
• Intersection load testing. Push the intersections to their throughput limits and verify the arbitration logic remains deterministic. Queueing fairness matters less than confirming there is no scenario in which two vehicles believe they hold the same crossing.

Where DAIDISIKE scanners fit, briefly and neutrally

Use the LiDAR family by safety and perception duty to keep the vehicle functions distinct. ST27 is the confirmed Type 3 / PL d / SIL 2 safety scanner; DLD05A3, DLD20A5, DLD30T-5N and SDLD-05A provide non-safety sensing. Before selecting a smaller field, verify safe speed and direction and include transition timing using the multi-zone field-switching guide. Ordinary navigation slowdown must not be credited as a safety function.

The bottom line

At fleet scale the safety problem moves outward from the vehicle. Scanners are no longer isolated devices; they share the optical environment with their peers and need interference mitigation that actually works in practice. The fleet manager stops being a piece of logistics software and becomes a safety-relevant element of the system, even if it is not itself safety-rated. Intersections, docks and pedestrian crossings need engineered rules, not goodwill. Validation has to cover population behaviour, not just individual-vehicle behaviour. ISO 3691-4:2023 and ANSI/RIA R15.08 already treat the fleet this way; the deployments that treat it the same way are the ones that stay out of the incident reports.