Safety of buses is crucial because of the large proportion of the public transportation sector they constitute. To improve bus safety levels, especially to avoid driver error, which is a key factor in traffic accidents, we designed and implemented an intelligent bus called iBus. A robust system architecture is crucial to iBus. Thus, in this paper, a novel self-driving system architecture with improved robustness, such as to failure of hardware (including sensors and controllers), is proposed. Unlike other self-driving vehicles that operate either in manual driving mode or in self-driving mode, iBus offers a dual-control mode. More specifically, an online hot standby mechanism is incorporated to enhance the reliability of the control system, and a software monitor is implemented to ensure that all software modules function appropriately. The results of real-world road tests conducted to validate the feasibility of the overall system confirm that iBus is reliable and robust.