Source files

Mapping profiles

TORINO grounded verification · testcase

VMMP conservative · requirement

Import history

VME-PROD-VehicleMotionManagement - VMMP_SINFCT_CFBVSSAFE.xlsx · source records

Replace generic input signals by specific input signals

Inputs

Signal-Values:

IF: 

VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_SwSti is set true

THEN: 

CustFctIn_OruCtlA_StAcv = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlAStPrkLockReqSti 

CustFctIn_OruCtlD_StAcv = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlDStPrkLockReqSti

ELSE:

CustFctIn_OruCtlA_StAcv = OruCtlA_s_PrkCtl_StPrkLockReq 

CustFctIn_OruCtlD_StAcv = OruCtlD_s_PrkCtl_StPrkLockReq

Signal-Classifier:

IF: 

VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_SwSti is set true

THEN: 

CustFctIn_OruCtlA_StAcv_sc = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlAClasSti 

CustFctIn_OruCtlD_StAcv_sc = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlDClasSti

ELSE:

CustFctIn_OruCtlA_StAcv_sc = OruCtlA_sc_PrkCtl_StPrkLockReq 

CustFctIn_OruCtlD_StAcv_sc = OruCtlD_sc_PrkCtl_StPrkLockReq

Parameters 

CustFctIn_OruCtl_FlgIniExcDet = VMMP_CFBVSSAFE_c_OruCtlPrkLckCtl_FlgIniExcDet

CustFctIn_OruCtl_FlgErrQlfAcv = VMMP_CFBVSSAFE_c_OruCtlPrkLckCtl_FlgErrQlfAcv

CustFctIn_OruCtl_TurnOff = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TurnOff

{
  "ID": "16666686.0",
  "ASIL": "  ASIL D",
  "Text": "Replace generic input signals by specific input signals\n\r \n\r\n\rInputs\n\rSignal-Values:\n\rIF: \n\rVMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_SwSti is set true\n\rTHEN: \n\rCustFctIn_OruCtlA_StAcv = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlAStPrkLockReqSti \n\rCustFctIn_OruCtlD_StAcv = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlDStPrkLockReqSti\n\rELSE:\n\rCustFctIn_OruCtlA_StAcv = OruCtlA_s_PrkCtl_StPrkLockReq \n\rCustFctIn_OruCtlD_StAcv = OruCtlD_s_PrkCtl_StPrkLockReq\n\r \n\rSignal-Classifier:\n\rIF: \n\rVMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_SwSti is set true\n\rTHEN: \n\rCustFctIn_OruCtlA_StAcv_sc = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlAClasSti \n\rCustFctIn_OruCtlD_StAcv_sc = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlDClasSti\n\rELSE:\n\rCustFctIn_OruCtlA_StAcv_sc = OruCtlA_sc_PrkCtl_StPrkLockReq \n\rCustFctIn_OruCtlD_StAcv_sc = OruCtlD_sc_PrkCtl_StPrkLockReq\n\r \n\rParameters \n\rCustFctIn_OruCtl_FlgIniExcDet = VMMP_CFBVSSAFE_c_OruCtlPrkLckCtl_FlgIniExcDet\n\rCustFctIn_OruCtl_FlgErrQlfAcv = VMMP_CFBVSSAFE_c_OruCtlPrkLckCtl_FlgErrQlfAcv\n\rCustFctIn_OruCtl_TurnOff = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TurnOff",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "Replace generic input signals by specific input signals",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342066.0",
  "Description": "Replace generic input signals by specific input signals\n\r \n\r\n\rInputs\n\rSignal-Values:\n\rIF: \n\rVMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_SwSti is set true\n\rTHEN: \n\rCustFctIn_OruCtlA_StAcv = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlAStPrkLockReqSti \n\rCustFctIn_OruCtlD_StAcv = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlDStPrkLockReqSti\n\rELSE:\n\rCustFctIn_OruCtlA_StAcv = OruCtlA_s_PrkCtl_StPrkLockReq \n\rCustFctIn_OruCtlD_StAcv = OruCtlD_s_PrkCtl_StPrkLockReq\n\r \n\rSignal-Classifier:\n\rIF: \n\rVMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_SwSti is set true\n\rTHEN: \n\rCustFctIn_OruCtlA_StAcv_sc = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlAClasSti \n\rCustFctIn_OruCtlD_StAcv_sc = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_OruCtlDClasSti\n\rELSE:\n\rCustFctIn_OruCtlA_StAcv_sc = OruCtlA_sc_PrkCtl_StPrkLockReq \n\rCustFctIn_OruCtlD_StAcv_sc = OruCtlD_sc_PrkCtl_StPrkLockReq\n\r \n\rParameters \n\rCustFctIn_OruCtl_FlgIniExcDet = VMMP_CFBVSSAFE_c_OruCtlPrkLckCtl_FlgIniExcDet\n\rCustFctIn_OruCtl_FlgErrQlfAcv = VMMP_CFBVSSAFE_c_OruCtlPrkLckCtl_FlgErrQlfAcv\n\rCustFctIn_OruCtl_TurnOff = VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TurnOff",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

RangeCheck: Check if input signal range is valid 

There is no RangeCheck for OruCtl-Service: Signal range is valid is always applied. (Signal range is invalid is never applied)

{
  "ID": "16666687.0",
  "ASIL": "  ASIL D",
  "Text": "RangeCheck: Check if input signal range is valid \n\rThere is no RangeCheck for OruCtl-Service: Signal range is valid is always applied. (Signal range is invalid is never applied)",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342068.0",
  "Description": "RangeCheck: Check if input signal range is valid \n\rThere is no RangeCheck for OruCtl-Service: Signal range is valid is always applied. (Signal range is invalid is never applied)",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

Assign generic output signals to specific output signals

StAcv

IF: AND[1,2]

1) CustFctOut_OruCtlA_StAcv = VMMP_SINFCT_c_CusFctIn_StReqAcv for more than VMMP_CFBVSSAFE_p_OruCtlAPrkLckCtl_TiStepDebReq software cycles

2) CustFctOut_OruCtlD_StAcv = VMMP_SINFCT_c_CusFctIn_StReqAcv for more than VMMP_CFBVSSAFE_p_OruCtlAPrkLckCtl_TiStepDebReq software cycles

THEN:

CFBVSSAFE_m_OruCtl_StPrkLockReqDeb = VMMP_SINFCT_c_CusFctIn_StReqAcv

ELSEIF: AND[3,4]

3) CustFctOut_OruCtlA_StAcv = VMMP_SINFCT_c_CusFctIn_StReqNoReq

4) CustFctOut_OruCtlD_StAcv = VMMP_SINFCT_c_CusFctIn_StReqNoReq

THEN:

CFBVSSAFE_m_OruCtl_StPrkLockReqDeb = VMMP_SINFCT_c_CusFctIn_StReqNoReq

ELSE:

CFBVSSAFE_m_OruCtl_StPrkLockReqDeb = VMMP_SINFCT_c_CusFctIn_StReqFail

All other Outputs

-

States

-

{
  "ID": "16666688.0",
  "ASIL": "  ASIL D",
  "Text": "Assign generic output signals to specific output signals\n\r \n\r\n\rStAcv\n\rIF: AND[1,2]\n\r1) CustFctOut_OruCtlA_StAcv = VMMP_SINFCT_c_CusFctIn_StReqAcv for more than VMMP_CFBVSSAFE_p_OruCtlAPrkLckCtl_TiStepDebReq software cycles\n\r2) CustFctOut_OruCtlD_StAcv = VMMP_SINFCT_c_CusFctIn_StReqAcv for more than VMMP_CFBVSSAFE_p_OruCtlAPrkLckCtl_TiStepDebReq software cycles\n\rTHEN:\n\rCFBVSSAFE_m_OruCtl_StPrkLockReqDeb = VMMP_SINFCT_c_CusFctIn_StReqAcv\n\rELSEIF: AND[3,4]\n\r3) CustFctOut_OruCtlA_StAcv = VMMP_SINFCT_c_CusFctIn_StReqNoReq\n\r4) CustFctOut_OruCtlD_StAcv = VMMP_SINFCT_c_CusFctIn_StReqNoReq\n\rTHEN:\n\rCFBVSSAFE_m_OruCtl_StPrkLockReqDeb = VMMP_SINFCT_c_CusFctIn_StReqNoReq\n\rELSE:\n\rCFBVSSAFE_m_OruCtl_StPrkLockReqDeb = VMMP_SINFCT_c_CusFctIn_StReqFail\n\r \n\rAll other Outputs\n\r-\n\rStates\n\r-",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342064.0",
  "Description": "Assign generic output signals to specific output signals\n\r \n\r\n\rStAcv\n\rIF: AND[1,2]\n\r1) CustFctOut_OruCtlA_StAcv = VMMP_SINFCT_c_CusFctIn_StReqAcv for more than VMMP_CFBVSSAFE_p_OruCtlAPrkLckCtl_TiStepDebReq software cycles\n\r2) CustFctOut_OruCtlD_StAcv = VMMP_SINFCT_c_CusFctIn_StReqAcv for more than VMMP_CFBVSSAFE_p_OruCtlAPrkLckCtl_TiStepDebReq software cycles\n\rTHEN:\n\rCFBVSSAFE_m_OruCtl_StPrkLockReqDeb = VMMP_SINFCT_c_CusFctIn_StReqAcv\n\rELSEIF: AND[3,4]\n\r3) CustFctOut_OruCtlA_StAcv = VMMP_SINFCT_c_CusFctIn_StReqNoReq\n\r4) CustFctOut_OruCtlD_StAcv = VMMP_SINFCT_c_CusFctIn_StReqNoReq\n\rTHEN:\n\rCFBVSSAFE_m_OruCtl_StPrkLockReqDeb = VMMP_SINFCT_c_CusFctIn_StReqNoReq\n\rELSE:\n\rCFBVSSAFE_m_OruCtl_StPrkLockReqDeb = VMMP_SINFCT_c_CusFctIn_StReqFail\n\r \n\rAll other Outputs\n\r-\n\rStates\n\r-",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

Assign generic output signals to specific output signals

StAcv (not used)

All other Outputs (not used)

States

CFBVSSAFE_s_DiagOruCtlPrkLckCtl_StEve = CustFctOut_OruCtl_StDiagEve

{
  "ID": "16666689.0",
  "ASIL": "  QM",
  "Text": "Assign generic output signals to specific output signals\n\r \n\rStAcv (not used)\n\r \n\r\n\rAll other Outputs (not used)\n\r \n\rStates\n\rCFBVSSAFE_s_DiagOruCtlPrkLckCtl_StEve = CustFctOut_OruCtl_StDiagEve",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1342211.0",
  "Description": "Assign generic output signals to specific output signals\n\r \n\rStAcv (not used)\n\r \n\r\n\rAll other Outputs (not used)\n\r \n\rStates\n\rCFBVSSAFE_s_DiagOruCtlPrkLckCtl_StEve = CustFctOut_OruCtl_StDiagEve",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

TurnOff OruCtl

IF:

VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TurnOff = True

THEN:

the output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall be equal to VMMP_ARB_c_BpSrv_StAcvOff

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall be equal to False

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall be equal to False

the output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall be equal to False

the output VMMP_s_NVMBlck05_FlgTrigWr shall be equal to False

Note: This requirement doesn't affect the state machine description below. If VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TurnOff is true, the module output will be set to the values above.

{
  "ID": "16666690.0",
  "ASIL": "  ASIL D",
  "Text": "TurnOff OruCtl\n\r \n\rIF:\n\rVMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TurnOff = True\n\r \n\rTHEN:\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall be equal to VMMP_ARB_c_BpSrv_StAcvOff\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall be equal to False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall be equal to False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall be equal to False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall be equal to False\n\r \n\rNote: This requirement doesn't affect the state machine description below. If VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TurnOff is true, the module output will be set to the values above.",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "TurnOff OruCtl",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1342462.0",
  "Description": "TurnOff OruCtl\n\r \n\rIF:\n\rVMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TurnOff = True\n\r \n\rTHEN:\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall be equal to VMMP_ARB_c_BpSrv_StAcvOff\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall be equal to False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall be equal to False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall be equal to False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall be equal to False\n\r \n\rNote: This requirement doesn't affect the state machine description below. If VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TurnOff is true, the module output will be set to the values above.",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

OruCtl ParkLockControl States

{
  "ID": "16666691.0",
  "ASIL": "  ",
  "Text": "OruCtl ParkLockControl States",
  "Type": "Folder",
  "Status": "",
  "Summary": "OruCtl ParkLockControl States",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341936.0",
  "Description": "",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

OruCtl States:

The following states are defined and implemented via stateflow

* Init [after software start]

* NotAvailable [when preconditions are not fulfilled]

* Failure [when there is a failure detected]

* Available [when all preconditions are fulfilled]

* LockActive [when function is active]

* Activation sequence [when function shall be activated]

* Deactivation sequence [when function shall be deactivated]

There is no straight forward logic, but instead several loops within the stateflow. Therefore no order can be defined. Everytime a state is mentioned you will find the existing sub-chapter for this state

{
  "ID": "16666692.0",
  "ASIL": "  ",
  "Text": "OruCtl States:\n\rThe following states are defined and implemented via stateflow\n\r* Init [after software start]\n\r* NotAvailable [when preconditions are not fulfilled]\n\r* Failure [when there is a failure detected]\n\r* Available [when all preconditions are fulfilled]\n\r* LockActive [when function is active]\n\r* Activation sequence [when function shall be activated]\n\r* Deactivation sequence [when function shall be deactivated]\n\rThere is no straight forward logic, but instead several loops within the stateflow. Therefore no order can be defined. Everytime a state is mentioned you will find the existing sub-chapter for this state",
  "Type": "Information",
  "Status": "",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341938.0",
  "Description": "OruCtl States:\n\rThe following states are defined and implemented via stateflow\n\r* Init [after software start]\n\r* NotAvailable [when preconditions are not fulfilled]\n\r* Failure [when there is a failure detected]\n\r* Available [when all preconditions are fulfilled]\n\r* LockActive [when function is active]\n\r* Activation sequence [when function shall be activated]\n\r* Deactivation sequence [when function shall be deactivated]\n\rThere is no straight forward logic, but instead several loops within the stateflow. Therefore no order can be defined. Everytime a state is mentioned you will find the existing sub-chapter for this state",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

Memory behaviour of OruCtl stateflow

IF:

None of the following OruCtl state entry conditions are true

THEN:

The last active OruCtl state shall stay active

{
  "ID": "16666693.0",
  "ASIL": "  ASIL D",
  "Text": "Memory behaviour of OruCtl stateflow\n\r \n\r\n\rIF:\n\rNone of the following OruCtl state entry conditions are true\n\rTHEN:\n\rThe last active OruCtl state shall stay active",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342138.0",
  "Description": "Memory behaviour of OruCtl stateflow\n\r \n\r\n\rIF:\n\rNone of the following OruCtl state entry conditions are true\n\rTHEN:\n\rThe last active OruCtl state shall stay active",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

< Init >

{
  "ID": "16666694.0",
  "ASIL": "  ",
  "Text": "< Init >",
  "Type": "Folder",
  "Status": "",
  "Summary": "< Init >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341940.0",
  "Description": "",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

State "Init"

Normally executed first after start of the system/simulation

{
  "ID": "16666695.0",
  "ASIL": "  ",
  "Text": "State \"Init\"\n\rNormally executed first after start of the system/simulation",
  "Type": "Information",
  "Status": "",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341949.0",
  "Description": "State \"Init\"\n\rNormally executed first after start of the system/simulation",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

How to enter state < Init >:

IF: OR[AND(1,2,3),AND(4,OR(5,6,7)),AND(8,9)]

1) the module is newly started (first software cycle)

2) the input VMMP_s_NVM13Read_FlgOruPrkLckAcv shows the value False

3) the input VMMP_s_IRV_NVMBlck05_InitErrorStatus shows the value 0

4) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarIni

5) the system was in the state <NotAvailable> in the last software-cycle

6) the system was in the state <Available> in the last software-cycle

7) the system was in the state <Failure> in the last software-cycle

8) the system was in the state <Off> in the last software-cycle

9) the input CRMSA_s_OruCtlPrkLckCtl_StTar is NOT equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOff

THEN: 

the state < Init > shall be active

{
  "ID": "16666696.0",
  "ASIL": "  QM",
  "Text": "How to enter state < Init >:\n\r \n\r\n\rIF: OR[AND(1,2,3),AND(4,OR(5,6,7)),AND(8,9)]\n\r1) the module is newly started (first software cycle)\n\r2) the input VMMP_s_NVM13Read_FlgOruPrkLckAcv shows the value False\n\r3) the input VMMP_s_IRV_NVMBlck05_InitErrorStatus shows the value 0\n\r4) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarIni\n\r5) the system was in the state <NotAvailable> in the last software-cycle\n\r6) the system was in the state <Available> in the last software-cycle\n\r7) the system was in the state <Failure> in the last software-cycle\n\r8) the system was in the state <Off> in the last software-cycle\n\r9) the input CRMSA_s_OruCtlPrkLckCtl_StTar is NOT equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOff\n\r \n\rTHEN: \n\rthe state < Init > shall be active",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "How to enter state < Init >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341951.0",
  "Description": "How to enter state < Init >:\n\r \n\r\n\rIF: OR[AND(1,2,3),AND(4,OR(5,6,7)),AND(8,9)]\n\r1) the module is newly started (first software cycle)\n\r2) the input VMMP_s_NVM13Read_FlgOruPrkLckAcv shows the value False\n\r3) the input VMMP_s_IRV_NVMBlck05_InitErrorStatus shows the value 0\n\r4) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarIni\n\r5) the system was in the state <NotAvailable> in the last software-cycle\n\r6) the system was in the state <Available> in the last software-cycle\n\r7) the system was in the state <Failure> in the last software-cycle\n\r8) the system was in the state <Off> in the last software-cycle\n\r9) the input CRMSA_s_OruCtlPrkLckCtl_StTar is NOT equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOff\n\r \n\rTHEN: \n\rthe state < Init > shall be active",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state < Init > is active:

the output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvIni

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False

the output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False

the output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False

{
  "ID": "16666697.0",
  "ASIL": "  ASIL D",
  "Text": "As long as state < Init > is active:\n\r \n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvIni\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1341953.0",
  "Description": "As long as state < Init > is active:\n\r \n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvIni\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

< Off >

{
  "ID": "16666698.0",
  "ASIL": "  ",
  "Text": "< Off >",
  "Type": "Folder",
  "Status": "",
  "Summary": "< Off >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342131.0",
  "Description": "",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

State Off

Executed when OruCtl functionality is permanently not available for customer function

{
  "ID": "16666699.0",
  "ASIL": "  ",
  "Text": "State Off\n\rExecuted when OruCtl functionality is permanently not available for customer function",
  "Type": "Information",
  "Status": "",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342130.0",
  "Description": "State Off\n\rExecuted when OruCtl functionality is permanently not available for customer function",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

How to enter state < Off >:

IF: AND(1,OR(2,3,4,5))

1) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOff

2) the system was in the state <Init> in the last software-cycle

3) the system was in the state <Available> in the last software-cycle

4) the system was in the state <NotAvailable> in the last software-cycle

5) the system was in the state <Failure> in the last software-cycle

THEN: 

the state < Off > shall be active

{
  "ID": "16666700.0",
  "ASIL": "  QM",
  "Text": "How to enter state < Off >:\n\r \n\rIF: AND(1,OR(2,3,4,5))\n\r1) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOff\n\r2) the system was in the state <Init> in the last software-cycle\n\r3) the system was in the state <Available> in the last software-cycle\n\r4) the system was in the state <NotAvailable> in the last software-cycle\n\r5) the system was in the state <Failure> in the last software-cycle\n\rTHEN: \n\rthe state < Off > shall be active",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "How to enter state < Off >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342132.0",
  "Description": "How to enter state < Off >:\n\r \n\rIF: AND(1,OR(2,3,4,5))\n\r1) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOff\n\r2) the system was in the state <Init> in the last software-cycle\n\r3) the system was in the state <Available> in the last software-cycle\n\r4) the system was in the state <NotAvailable> in the last software-cycle\n\r5) the system was in the state <Failure> in the last software-cycle\n\rTHEN: \n\rthe state < Off > shall be active",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state < Off > is active:

the output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvOff

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False

the output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False

the output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False

{
  "ID": "16666701.0",
  "ASIL": "  ASIL D",
  "Text": "As long as state < Off > is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvOff\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1342133.0",
  "Description": "As long as state < Off > is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvOff\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

< NotAvailable >

{
  "ID": "16666702.0",
  "ASIL": "  ",
  "Text": "< NotAvailable >",
  "Type": "Folder",
  "Status": "",
  "Summary": "< NotAvailable >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341941.0",
  "Description": "",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

State NotAvailable

Executed when OruCtl functionality is currently not available for customer function

{
  "ID": "16666703.0",
  "ASIL": "  ",
  "Text": "State NotAvailable\n\rExecuted when OruCtl functionality is currently not available for customer function",
  "Type": "Information",
  "Status": "",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341955.0",
  "Description": "State NotAvailable\n\rExecuted when OruCtl functionality is currently not available for customer function",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

How to enter state < NotAvailable >:

IF: OR[AND(1,OR(3,4,5,6)), AND(2,OR(3,6)),AND(6,7),AND(6,8)]:

1) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarNotAvl

2) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarRstct

3) the system was in the state <Init> in the last software-cycle

4) the system was in the state <Available> in the last software-cycle

5) the system was in the state <Failure> in the last software-cycle

6) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes successful

7) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarIni

8) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOff

THEN: 

the state <NotAvailable> shall be active

Note: VMMP_CRMSA_c_ARB_SrvCtlStTarRstct is not used in software module CFBVSSAFE, because "Restricted" is not a explicit state of OruCtl statemachine. VMMP_CRMSA_c_ARB_SrvCtlStTarRstct has the value 1 and shall test CRMSA_s_OruCtlPrkLckCtl_StTar != 0 (On), 2 (NotAvl), 3 (Ini), 4 (Fail) and 5 (Off). CRMSA_s_OruCtlPrkLckCtl_StTar has the signal range 0 to 5.

{
  "ID": "16666704.0",
  "ASIL": "  QM",
  "Text": "How to enter state < NotAvailable >:\n\r \n\r \n\rIF: OR[AND(1,OR(3,4,5,6)), AND(2,OR(3,6)),AND(6,7),AND(6,8)]:\n\r1) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarNotAvl\n\r2) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarRstct\n\r3) the system was in the state <Init> in the last software-cycle\n\r4) the system was in the state <Available> in the last software-cycle\n\r5) the system was in the state <Failure> in the last software-cycle\n\r6) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes successful\n\r7) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarIni\n\r8) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOff\n\rTHEN: \n\rthe state <NotAvailable> shall be active\n\r \n\rNote: VMMP_CRMSA_c_ARB_SrvCtlStTarRstct is not used in software module CFBVSSAFE, because \"Restricted\" is not a explicit state of OruCtl statemachine. VMMP_CRMSA_c_ARB_SrvCtlStTarRstct has the value 1 and shall test CRMSA_s_OruCtlPrkLckCtl_StTar != 0 (On), 2 (NotAvl), 3 (Ini), 4 (Fail) and 5 (Off). CRMSA_s_OruCtlPrkLckCtl_StTar has the signal range 0 to 5.",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "How to enter state < NotAvailable >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341956.0",
  "Description": "How to enter state < NotAvailable >:\n\r \n\r \n\rIF: OR[AND(1,OR(3,4,5,6)), AND(2,OR(3,6)),AND(6,7),AND(6,8)]:\n\r1) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarNotAvl\n\r2) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarRstct\n\r3) the system was in the state <Init> in the last software-cycle\n\r4) the system was in the state <Available> in the last software-cycle\n\r5) the system was in the state <Failure> in the last software-cycle\n\r6) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes successful\n\r7) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarIni\n\r8) the input CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOff\n\rTHEN: \n\rthe state <NotAvailable> shall be active\n\r \n\rNote: VMMP_CRMSA_c_ARB_SrvCtlStTarRstct is not used in software module CFBVSSAFE, because \"Restricted\" is not a explicit state of OruCtl statemachine. VMMP_CRMSA_c_ARB_SrvCtlStTarRstct has the value 1 and shall test CRMSA_s_OruCtlPrkLckCtl_StTar != 0 (On), 2 (NotAvl), 3 (Ini), 4 (Fail) and 5 (Off). CRMSA_s_OruCtlPrkLckCtl_StTar has the signal range 0 to 5.",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state <NotAvailable> is active:

the output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv always show the value VMMP_ARB_c_BpSrv_StAcvNotAvl

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False

the output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False

the output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False

{
  "ID": "16666705.0",
  "ASIL": "  ASIL D",
  "Text": "As long as state <NotAvailable> is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv always show the value VMMP_ARB_c_BpSrv_StAcvNotAvl\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1341957.0",
  "Description": "As long as state <NotAvailable> is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv always show the value VMMP_ARB_c_BpSrv_StAcvNotAvl\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

< Failure >

{
  "ID": "16666706.0",
  "ASIL": "  ",
  "Text": "< Failure >",
  "Type": "Folder",
  "Status": "",
  "Summary": "< Failure >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341942.0",
  "Description": "",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

State Failure

Executed when a system error is detected

{
  "ID": "16666707.0",
  "ASIL": "  ",
  "Text": "State Failure\n\rExecuted when a system error is detected",
  "Type": "Information",
  "Status": "",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341959.0",
  "Description": "State Failure\n\rExecuted when a system error is detected",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

How to enter state < Failure >:

IF: OR[AND(1,OR(2,3,4,5)),6,7,8,9]:

1) the inputs CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarFail

2) the system was in the state <Init> in the last software-cycle

3) the system was in the state <NotAvailable> in the last software-cycle

4) the system was in the state <Available> in the last software-cycle

5) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes successfull

6) the valid <Activation sequence> time of VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds was exceeded by two time steps

7) the system was in the state <Activation sequence> in the last software-cycle AND NVM write access returnes NOT successfull

8) the valid <Deactivation sequence> time of VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds was exceeded by two time steps

9) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes NOT successfull

THEN: 

the state <Failure> shall be active

{
  "ID": "16666708.0",
  "ASIL": "  QM",
  "Text": "How to enter state < Failure >:\n\r \n\rIF: OR[AND(1,OR(2,3,4,5)),6,7,8,9]:\n\r1) the inputs CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarFail\n\r2) the system was in the state <Init> in the last software-cycle\n\r3) the system was in the state <NotAvailable> in the last software-cycle\n\r4) the system was in the state <Available> in the last software-cycle\n\r5) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes successfull\n\r6) the valid <Activation sequence> time of VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds was exceeded by two time steps\n\r7) the system was in the state <Activation sequence> in the last software-cycle AND NVM write access returnes NOT successfull\n\r8) the valid <Deactivation sequence> time of VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds was exceeded by two time steps\n\r9) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes NOT successfull\n\rTHEN: \n\rthe state <Failure> shall be active",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "How to enter state < Failure >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341960.0",
  "Description": "How to enter state < Failure >:\n\r \n\rIF: OR[AND(1,OR(2,3,4,5)),6,7,8,9]:\n\r1) the inputs CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarFail\n\r2) the system was in the state <Init> in the last software-cycle\n\r3) the system was in the state <NotAvailable> in the last software-cycle\n\r4) the system was in the state <Available> in the last software-cycle\n\r5) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes successfull\n\r6) the valid <Activation sequence> time of VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds was exceeded by two time steps\n\r7) the system was in the state <Activation sequence> in the last software-cycle AND NVM write access returnes NOT successfull\n\r8) the valid <Deactivation sequence> time of VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds was exceeded by two time steps\n\r9) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes NOT successfull\n\rTHEN: \n\rthe state <Failure> shall be active",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state <Failure> is active:

the output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvFail

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False

the output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False

the output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False

{
  "ID": "16666709.0",
  "ASIL": "  ASIL D",
  "Text": "As long as state <Failure> is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvFail\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1341961.0",
  "Description": "As long as state <Failure> is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvFail\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

< Available >

{
  "ID": "16666710.0",
  "ASIL": "  ",
  "Text": "< Available >",
  "Type": "Folder",
  "Status": "",
  "Summary": "< Available >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341943.0",
  "Description": "",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

State Available

Executed when OruCtl functionality is available for customer function

{
  "ID": "16666711.0",
  "ASIL": "  ",
  "Text": "State Available\n\rExecuted when OruCtl functionality is available for customer function",
  "Type": "Information",
  "Status": "",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341963.0",
  "Description": "State Available\n\rExecuted when OruCtl functionality is available for customer function",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

How to enter state < Available >:

IF: AND(1,OR(2,3,4,5)):

1) the inputs CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOn

2) the system was in the state <Init> in the last software-cycle

3) the system was in the state <NotAvailable> in the last software-cycle

4) the system was in the state <Failure> in the last software-cycle

5) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes successfull

THEN: 

the state <Available> shall be active

{
  "ID": "16666712.0",
  "ASIL": "  QM",
  "Text": "How to enter state < Available >:\n\r \n\rIF: AND(1,OR(2,3,4,5)):\n\r1) the inputs CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOn\n\r2) the system was in the state <Init> in the last software-cycle\n\r3) the system was in the state <NotAvailable> in the last software-cycle\n\r4) the system was in the state <Failure> in the last software-cycle\n\r5) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes successfull\n\rTHEN: \n\rthe state <Available> shall be active",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "How to enter state < Available >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341964.0",
  "Description": "How to enter state < Available >:\n\r \n\rIF: AND(1,OR(2,3,4,5)):\n\r1) the inputs CRMSA_s_OruCtlPrkLckCtl_StTar is equal to VMMP_CRMSA_c_ARB_SrvCtlStTarOn\n\r2) the system was in the state <Init> in the last software-cycle\n\r3) the system was in the state <NotAvailable> in the last software-cycle\n\r4) the system was in the state <Failure> in the last software-cycle\n\r5) the system was in the state <Deactivation sequence> in the last software-cycle AND NVM write access returnes successfull\n\rTHEN: \n\rthe state <Available> shall be active",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state < Available > is active:

the output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvAvl

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False

the output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False

the output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False

{
  "ID": "16666713.0",
  "ASIL": "  ASIL D",
  "Text": "As long as state < Available > is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvAvl\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1341965.0",
  "Description": "As long as state < Available > is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvAvl\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value False\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value False\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value False\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall show the value False",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

< Activation sequence >

{
  "ID": "16666714.0",
  "ASIL": "  ",
  "Text": "< Activation sequence >",
  "Type": "Folder",
  "Status": "",
  "Summary": "< Activation sequence >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341969.0",
  "Description": "",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

State Activation sequence

Executed when OruCtl functionality is currently activating for customer function but not fully active yet

{
  "ID": "16666715.0",
  "ASIL": "  ",
  "Text": "State Activation sequence\n\rExecuted when OruCtl functionality is currently activating for customer function but not fully active yet",
  "Type": "Information",
  "Status": "",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342125.0",
  "Description": "State Activation sequence\n\rExecuted when OruCtl functionality is currently activating for customer function but not fully active yet",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

How to enter state < Activation sequence >:

IF: AND(1,2,3,4,5): 

1) the system was in the state <Available> in the last software-cycle

2) the internal signal CFBVSSAFE_m_OruCtl_StPrkLockReqDeb is equal to the value VMMP_SINFCT_c_CusFctIn_StReqAcv

3) the input signal HMSOP_s_StPrkBrkAcv is equal to the value [VMMP_HMS_c_StPrkBrkAcvApplied OR VMMP_HMS_c_StPrkBrkAcvAlyLck]

4) the input signal HMSOP_s_StPrkPosnAcv is equal to the value [VMMP_HMS_c_StPrkPosnAcvAlyLck OR VMMP_HMS_c_StPrkPosnAcvAly]

5) the input signal VSOVD_s_StDrvDir is equal to the value VMMP_VSOVD_c_DrvDirPrk

THEN:

the state <Activation sequence> shall be active

{
  "ID": "16666716.0",
  "ASIL": "  ASIL D",
  "Text": "How to enter state < Activation sequence >:\n\rIF: AND(1,2,3,4,5): \n\r1) the system was in the state <Available> in the last software-cycle\n\r2) the internal signal CFBVSSAFE_m_OruCtl_StPrkLockReqDeb is equal to the value VMMP_SINFCT_c_CusFctIn_StReqAcv\n\r3) the input signal HMSOP_s_StPrkBrkAcv is equal to the value [VMMP_HMS_c_StPrkBrkAcvApplied OR VMMP_HMS_c_StPrkBrkAcvAlyLck]\n\r4) the input signal HMSOP_s_StPrkPosnAcv is equal to the value [VMMP_HMS_c_StPrkPosnAcvAlyLck OR VMMP_HMS_c_StPrkPosnAcvAly]\n\r5) the input signal VSOVD_s_StDrvDir is equal to the value VMMP_VSOVD_c_DrvDirPrk\n\rTHEN:\n\rthe state <Activation sequence> shall be active",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341997.0",
  "Description": "How to enter state < Activation sequence >:\n\rIF: AND(1,2,3,4,5): \n\r1) the system was in the state <Available> in the last software-cycle\n\r2) the internal signal CFBVSSAFE_m_OruCtl_StPrkLockReqDeb is equal to the value VMMP_SINFCT_c_CusFctIn_StReqAcv\n\r3) the input signal HMSOP_s_StPrkBrkAcv is equal to the value [VMMP_HMS_c_StPrkBrkAcvApplied OR VMMP_HMS_c_StPrkBrkAcvAlyLck]\n\r4) the input signal HMSOP_s_StPrkPosnAcv is equal to the value [VMMP_HMS_c_StPrkPosnAcvAlyLck OR VMMP_HMS_c_StPrkPosnAcvAly]\n\r5) the input signal VSOVD_s_StDrvDir is equal to the value VMMP_VSOVD_c_DrvDirPrk\n\rTHEN:\n\rthe state <Activation sequence> shall be active",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state <Activation sequence> is active:

VMMP_s_NVMBlck05_FlgTrigWr shall become true within one software cycle after entering state <Activation sequence>

IF:

Input VMMP_s_NVMBlck05_ClientServe_WrBlck_AppErr = 0 (RTE_E_OK)

THEN:

VMMP_s_NVMBlck05_FlgTrigWr shall become false again

ELSEIF: AND[1,2]

1) NVM write access returned successful in the previous computation cycle

2) VSOVD_s_StDrvDir is NOT equal to VMMP_VSOVD_c_DrvDirPrk

THEN:

VMMP_s_NVMBlck05_FlgTrigWr shall become true again

ELSEIF: AND[1,2]

1) NVM write access returned successful in the previous computation cycle

2) HMSOP_s_StPrkBrkAcv is NOT equal to VMMP_HMS_c_StPrkBrkAcvAlyLck

THEN:

VMMP_s_NVMBlck05_FlgTrigWr shall become true again

Information for the test: VMMP_s_NVMBlck05_FlgTrigWr becomes true after entering the state. Then VMMP_s_NVMBlck05_FlgTrigWr stays true until VMMP_s_NVMBlck05_ClientServe_WrBlck_AppErr = 0 (RTE_E_OK) and resets VMMP_s_NVMBlck05_FlgTrigWr to false.

Note: The NVM write process shall be repeated, if the NVM write access returns successful but state machine does not switch to LockActive state. Therefore, VMMP_s_NVMBlck05_FlgTrigWr shall be true again.

{
  "ID": "16666717.0",
  "ASIL": "  ASIL D",
  "Text": "As long as state <Activation sequence> is active:\n\r \n\r\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become true within one software cycle after entering state <Activation sequence>\n\r \n\rIF:\n\rInput VMMP_s_NVMBlck05_ClientServe_WrBlck_AppErr = 0 (RTE_E_OK)\n\rTHEN:\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become false again\n\r \n\rELSEIF: AND[1,2]\n\r1) NVM write access returned successful in the previous computation cycle\n\r2) VSOVD_s_StDrvDir is NOT equal to VMMP_VSOVD_c_DrvDirPrk\n\rTHEN:\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become true again\n\r \n\rELSEIF: AND[1,2]\n\r1) NVM write access returned successful in the previous computation cycle\n\r2) HMSOP_s_StPrkBrkAcv is NOT equal to VMMP_HMS_c_StPrkBrkAcvAlyLck\n\rTHEN:\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become true again\n\r \n\rInformation for the test: VMMP_s_NVMBlck05_FlgTrigWr becomes true after entering the state. Then VMMP_s_NVMBlck05_FlgTrigWr stays true until VMMP_s_NVMBlck05_ClientServe_WrBlck_AppErr = 0 (RTE_E_OK) and resets VMMP_s_NVMBlck05_FlgTrigWr to false.\n\r \n\rNote: The NVM write process shall be repeated, if the NVM write access returns successful but state machine does not switch to LockActive state. Therefore, VMMP_s_NVMBlck05_FlgTrigWr shall be true again.",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "As long as state <Activation sequence> is active",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1342432.0",
  "Description": "As long as state <Activation sequence> is active:\n\r \n\r\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become true within one software cycle after entering state <Activation sequence>\n\r \n\rIF:\n\rInput VMMP_s_NVMBlck05_ClientServe_WrBlck_AppErr = 0 (RTE_E_OK)\n\rTHEN:\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become false again\n\r \n\rELSEIF: AND[1,2]\n\r1) NVM write access returned successful in the previous computation cycle\n\r2) VSOVD_s_StDrvDir is NOT equal to VMMP_VSOVD_c_DrvDirPrk\n\rTHEN:\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become true again\n\r \n\rELSEIF: AND[1,2]\n\r1) NVM write access returned successful in the previous computation cycle\n\r2) HMSOP_s_StPrkBrkAcv is NOT equal to VMMP_HMS_c_StPrkBrkAcvAlyLck\n\rTHEN:\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become true again\n\r \n\rInformation for the test: VMMP_s_NVMBlck05_FlgTrigWr becomes true after entering the state. Then VMMP_s_NVMBlck05_FlgTrigWr stays true until VMMP_s_NVMBlck05_ClientServe_WrBlck_AppErr = 0 (RTE_E_OK) and resets VMMP_s_NVMBlck05_FlgTrigWr to false.\n\r \n\rNote: The NVM write process shall be repeated, if the NVM write access returns successful but state machine does not switch to LockActive state. Therefore, VMMP_s_NVMBlck05_FlgTrigWr shall be true again.",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state <Activation sequence> is active:

IF: AND[1,2,3,4]

1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)

2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)

3) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is equal to 7

4) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is equal to 0

THEN:

The NVM write access shall be defined as successful.

ELSEIF: AND[1,2,OR(5,6)]

1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)

2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)

5) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is NOT equal to 7

6) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is NOT equal to 0

THEN:

The NVM write access shall be defined as NOT successful.

ELSE:

The NVM write access shall be undefined.

{
  "ID": "16666718.0",
  "ASIL": "  ASIL D",
  "Text": "As long as state <Activation sequence> is active:\n\r \n\rIF: AND[1,2,3,4]\n\r1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)\n\r2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)\n\r3) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is equal to 7\n\r4) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is equal to 0\n\rTHEN:\n\rThe NVM write access shall be defined as successful.\n\r \n\rELSEIF: AND[1,2,OR(5,6)]\n\r1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)\n\r2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)\n\r5) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is NOT equal to 7\n\r6) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is NOT equal to 0\n\rTHEN:\n\rThe NVM write access shall be defined as NOT successful.\n\r \n\rELSE:\n\rThe NVM write access shall be undefined.",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1356935.0",
  "Description": "As long as state <Activation sequence> is active:\n\r \n\rIF: AND[1,2,3,4]\n\r1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)\n\r2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)\n\r3) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is equal to 7\n\r4) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is equal to 0\n\rTHEN:\n\rThe NVM write access shall be defined as successful.\n\r \n\rELSEIF: AND[1,2,OR(5,6)]\n\r1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)\n\r2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)\n\r5) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is NOT equal to 7\n\r6) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is NOT equal to 0\n\rTHEN:\n\rThe NVM write access shall be defined as NOT successful.\n\r \n\rELSE:\n\rThe NVM write access shall be undefined.",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as the state <Activation sequence> is active:

the output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvStb

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value True

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value True

the output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value True

{
  "ID": "16666719.0",
  "ASIL": "  ASIL D",
  "Text": "As long as the state <Activation sequence> is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvStb\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value True\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value True\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value True",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1341998.0",
  "Description": "As long as the state <Activation sequence> is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall show the value VMMP_ARB_c_BpSrv_StAcvStb\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall show the value True\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall show the value True\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall show the value True",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

< LockActive >

{
  "ID": "16666720.0",
  "ASIL": "  ",
  "Text": "< LockActive >",
  "Type": "Folder",
  "Status": "",
  "Summary": "< LockActive >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342121.0",
  "Description": "",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

State LockActive

Executed when OruCtl functionality is currently set active for customer function

{
  "ID": "16666721.0",
  "ASIL": "  ",
  "Text": "State LockActive\n\rExecuted when OruCtl functionality is currently set active for customer function",
  "Type": "Information",
  "Status": "",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342123.0",
  "Description": "State LockActive\n\rExecuted when OruCtl functionality is currently set active for customer function",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

How to enter state < LockActive >:

IF: OR[AND(1,OR(2,3)),AND(4,5,6)]:

1) the module is newly started (first software cycle)

2) the input VMMP_s_NVM13Read_FlgOruPrkLckAcv shows the value True

3) the input VMMP_s_IRV_NVMBlck05_InitErrorStatus is NOT equal to the value 0

4) the system was in the state <Activation sequence> in the last software-cycle AND NVM write access returnes successfull

5) the input signal HMSOP_s_StPrkBrkAcv is equal to the value VMMP_HMS_c_StPrkBrkAcvAlyLck

6) the input signal VSOVD_s_StDrvDir is equal to the value VMMP_VSOVD_c_DrvDirPrk

THEN: 

the state <LockActive> shall be active

{
  "ID": "16666722.0",
  "ASIL": "  ASIL D",
  "Text": "How to enter state < LockActive >:\n\rIF: OR[AND(1,OR(2,3)),AND(4,5,6)]:\n\r1) the module is newly started (first software cycle)\n\r2) the input VMMP_s_NVM13Read_FlgOruPrkLckAcv shows the value True\n\r3) the input VMMP_s_IRV_NVMBlck05_InitErrorStatus is NOT equal to the value 0\n\r4) the system was in the state <Activation sequence> in the last software-cycle AND NVM write access returnes successfull\n\r5) the input signal HMSOP_s_StPrkBrkAcv is equal to the value VMMP_HMS_c_StPrkBrkAcvAlyLck\n\r6) the input signal VSOVD_s_StDrvDir is equal to the value VMMP_VSOVD_c_DrvDirPrk\n\r \n\rTHEN: \n\rthe state <LockActive> shall be active",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341967.0",
  "Description": "How to enter state < LockActive >:\n\rIF: OR[AND(1,OR(2,3)),AND(4,5,6)]:\n\r1) the module is newly started (first software cycle)\n\r2) the input VMMP_s_NVM13Read_FlgOruPrkLckAcv shows the value True\n\r3) the input VMMP_s_IRV_NVMBlck05_InitErrorStatus is NOT equal to the value 0\n\r4) the system was in the state <Activation sequence> in the last software-cycle AND NVM write access returnes successfull\n\r5) the input signal HMSOP_s_StPrkBrkAcv is equal to the value VMMP_HMS_c_StPrkBrkAcvAlyLck\n\r6) the input signal VSOVD_s_StDrvDir is equal to the value VMMP_VSOVD_c_DrvDirPrk\n\r \n\rTHEN: \n\rthe state <LockActive> shall be active",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state < LockActive > is active:

the output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall be equal to VMMP_ARB_c_BpSrv_StAcvAcv

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall be True

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall be True

the output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall be True

the output VMMP_s_NVMBlck05_FlgTrigWr shall be False

{
  "ID": "16666723.0",
  "ASIL": "  ASIL D",
  "Text": "As long as state < LockActive > is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall be equal to VMMP_ARB_c_BpSrv_StAcvAcv\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall be True\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall be True\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall be True\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall be False",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1341968.0",
  "Description": "As long as state < LockActive > is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall be equal to VMMP_ARB_c_BpSrv_StAcvAcv\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall be True\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall be True\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall be True\n\rthe output VMMP_s_NVMBlck05_FlgTrigWr shall be False",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

< Deactivation sequence >

{
  "ID": "16666724.0",
  "ASIL": "  ",
  "Text": "< Deactivation sequence >",
  "Type": "Folder",
  "Status": "",
  "Summary": "< Deactivation sequence >",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1341970.0",
  "Description": "",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

State Deactivation sequence

Executed when OruCtl functionality is currently deactivating for customer function but not fully deactivated yet

{
  "ID": "16666725.0",
  "ASIL": "  ",
  "Text": "State Deactivation sequence\n\rExecuted when OruCtl functionality is currently deactivating for customer function but not fully deactivated yet",
  "Type": "Information",
  "Status": "",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342128.0",
  "Description": "State Deactivation sequence\n\rExecuted when OruCtl functionality is currently deactivating for customer function but not fully deactivated yet",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

How to enter state < Deactivation sequence >:

IF: AND(1,2)

1) the system was in the state <LockActive> in the last software-cycle

2) the internal signal CFBVSSAFE_m_OruCtl_StPrkLockReqDeb is equal to the value VMMP_SINFCT_c_CusFctIn_StReqNoReq

THEN:

the state <Deactivation sequence > shall be active

{
  "ID": "16666726.0",
  "ASIL": "  ASIL D",
  "Text": "How to enter state < Deactivation sequence >:\n\rIF: AND(1,2)\n\r1) the system was in the state <LockActive> in the last software-cycle\n\r2) the internal signal CFBVSSAFE_m_OruCtl_StPrkLockReqDeb is equal to the value VMMP_SINFCT_c_CusFctIn_StReqNoReq\n\rTHEN:\n\rthe state <Deactivation sequence > shall be active",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342004.0",
  "Description": "How to enter state < Deactivation sequence >:\n\rIF: AND(1,2)\n\r1) the system was in the state <LockActive> in the last software-cycle\n\r2) the internal signal CFBVSSAFE_m_OruCtl_StPrkLockReqDeb is equal to the value VMMP_SINFCT_c_CusFctIn_StReqNoReq\n\rTHEN:\n\rthe state <Deactivation sequence > shall be active",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state <Deactivation sequence> is active:

VMMP_s_NVMBlck05_FlgTrigWr shall become true within two software cycles after entering the state <Deactivation sequence>

IF: 1

1) Input VMMP_s_NVMBlck05_ClientServe_WrBlck_AppErr = 0 (RTE_E_OK)

THEN:

VMMP_s_NVMBlck05_FlgTrigWr shall become false again

Information for the test: VMMP_s_NVMBlck05_FlgTrigWr becomes true only after entering the state. Then VMMP_s_NVMBlck05_FlgTrigWr stays true until condition 1) gets true and resets VMMP_s_NVMBlck05_FlgTrigWr to false. The signal VMMP_s_NVMBlck05_FlgTrigWr shall remain to false afterwards until the state <Deactivation sequence> is reentered.

{
  "ID": "16666727.0",
  "ASIL": "  QM",
  "Text": "As long as state <Deactivation sequence> is active:\n\r \n\r\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become true within two software cycles after entering the state <Deactivation sequence>\n\r \n\rIF: 1\n\r1) Input VMMP_s_NVMBlck05_ClientServe_WrBlck_AppErr = 0 (RTE_E_OK)\n\rTHEN:\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become false again\n\r \n\rInformation for the test: VMMP_s_NVMBlck05_FlgTrigWr becomes true only after entering the state. Then VMMP_s_NVMBlck05_FlgTrigWr stays true until condition 1) gets true and resets VMMP_s_NVMBlck05_FlgTrigWr to false. The signal VMMP_s_NVMBlck05_FlgTrigWr shall remain to false afterwards until the state <Deactivation sequence> is reentered.",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1356941.0",
  "Description": "As long as state <Deactivation sequence> is active:\n\r \n\r\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become true within two software cycles after entering the state <Deactivation sequence>\n\r \n\rIF: 1\n\r1) Input VMMP_s_NVMBlck05_ClientServe_WrBlck_AppErr = 0 (RTE_E_OK)\n\rTHEN:\n\rVMMP_s_NVMBlck05_FlgTrigWr shall become false again\n\r \n\rInformation for the test: VMMP_s_NVMBlck05_FlgTrigWr becomes true only after entering the state. Then VMMP_s_NVMBlck05_FlgTrigWr stays true until condition 1) gets true and resets VMMP_s_NVMBlck05_FlgTrigWr to false. The signal VMMP_s_NVMBlck05_FlgTrigWr shall remain to false afterwards until the state <Deactivation sequence> is reentered.",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state <Deactivation sequence> is active:

IF: AND[1,2,3,4]

1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)

2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)

3) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is equal to 7

4) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is equal to 0

THEN:

The NVM write access shall be defined as successful.

ELSEIF: AND[1,2,OR(5,6)]

1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)

2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)

5) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is NOT equal to 7

6) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is NOT equal to 0

THEN:

The NVM write access shall be defined as NOT successful.

ELSE:

The NVM write access shall be undefined.

{
  "ID": "16666728.0",
  "ASIL": "  QM",
  "Text": "As long as state <Deactivation sequence> is active:\n\rIF: AND[1,2,3,4]\n\r1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)\n\r2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)\n\r3) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is equal to 7\n\r4) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is equal to 0\n\rTHEN:\n\rThe NVM write access shall be defined as successful.\n\r \n\rELSEIF: AND[1,2,OR(5,6)]\n\r1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)\n\r2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)\n\r5) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is NOT equal to 7\n\r6) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is NOT equal to 0\n\rTHEN:\n\rThe NVM write access shall be defined as NOT successful.\n\r \n\rELSE:\n\rThe NVM write access shall be undefined.",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "As long as state <Deactivation sequence> is active",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1356943.0",
  "Description": "As long as state <Deactivation sequence> is active:\n\rIF: AND[1,2,3,4]\n\r1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)\n\r2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)\n\r3) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is equal to 7\n\r4) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is equal to 0\n\rTHEN:\n\rThe NVM write access shall be defined as successful.\n\r \n\rELSEIF: AND[1,2,OR(5,6)]\n\r1) Output VMMP_s_NVMBlck05_FlgTrigWr is false (after it was true before in this state)\n\r2) VMMP_s_IRV_NVMBlck05_JobFinished_Called changes its value since output VMMP_s_NVMBlck05_FlgTrigWr became true (This input is supposed to toggle between 0 and 1 after each write trigger, only the software cycle in which the signal changes is relevant)\n\r5) input VMMP_s_IRV_NVMBlck05_JobFinished_ServiceID is NOT equal to 7\n\r6) input VMMP_s_IRV_NVMBlck05_JobFinished_Result is NOT equal to 0\n\rTHEN:\n\rThe NVM write access shall be defined as NOT successful.\n\r \n\rELSE:\n\rThe NVM write access shall be undefined.",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

As long as state <Deactivation sequence> is active:

the output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall be equal to VMMP_ARB_c_BpSrv_StAcvAcv

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall be True

the output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall be True

the output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall be False

{
  "ID": "16666729.0",
  "ASIL": "  ASIL D",
  "Text": "As long as state <Deactivation sequence> is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall be equal to VMMP_ARB_c_BpSrv_StAcvAcv\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall be True\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall be True\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall be False",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1342430.0",
  "Description": "As long as state <Deactivation sequence> is active:\n\r \n\r\n\rthe output CFBVSSAFE_s_OruCtlPrkCtl_StPrkLckAcv shall be equal to VMMP_ARB_c_BpSrv_StAcvAcv\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgDiTqWhlAcce shall be True\n\rthe output CFBVSSAFE_s_OruCtlPrkLckCtl_FlgPrkLckInfo shall be True\n\rthe output VMMP_s_NVM13Wr_FlgOruPrkLckAcv shall be False",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

Output CFBVSSAFE_s_DiagOruCtlNVMWr_StEve

{
  "ID": "16666730.0",
  "ASIL": "  ",
  "Text": "Output CFBVSSAFE_s_DiagOruCtlNVMWr_StEve",
  "Type": "Folder",
  "Status": "",
  "Summary": "Output CFBVSSAFE_s_DiagOruCtlNVMWr_StEve",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342454.0",
  "Description": "",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

Counter failed write access

IF: OR[1,2]

1) the module has been newly started

2) the state <Init> becomes active

THEN:

the internal counter failed write access is reset to 0

ELSEIF: OR[3,AND(4,OR(5,6))

3) the module changes from state <Activation sequence> to state <Failure>

4) the module changes from state <Deactivation sequence> to state <Failure>

5) NVM write access was NOT successful

6) the system was in the state <Deactivation sequence> for more than VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds

THEN:

the internal counter failed write access is raised by 1

ELSE:

the internal counter failed write access remains at its last value

{
  "ID": "16666731.0",
  "ASIL": "  QM",
  "Text": "Counter failed write access\n\r \n\r\n\rIF: OR[1,2]\n\r1) the module has been newly started\n\r2) the state <Init> becomes active\n\rTHEN:\n\rthe internal counter failed write access is reset to 0\n\r \n\r\n\rELSEIF: OR[3,AND(4,OR(5,6))\n\r3) the module changes from state <Activation sequence> to state <Failure>\n\r4) the module changes from state <Deactivation sequence> to state <Failure>\n\r5) NVM write access was NOT successful\n\r6) the system was in the state <Deactivation sequence> for more than VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds\n\rTHEN:\n\rthe internal counter failed write access is raised by 1\n\r \n\r\n\rELSE:\n\rthe internal counter failed write access remains at its last value",
  "Type": "Pre Condition",
  "Status": "Released",
  "Summary": "",
  "Relevant": "no",
  "column_12": "",
  "Foreign ID": "1342456.0",
  "Description": "Counter failed write access\n\r \n\r\n\rIF: OR[1,2]\n\r1) the module has been newly started\n\r2) the state <Init> becomes active\n\rTHEN:\n\rthe internal counter failed write access is reset to 0\n\r \n\r\n\rELSEIF: OR[3,AND(4,OR(5,6))\n\r3) the module changes from state <Activation sequence> to state <Failure>\n\r4) the module changes from state <Deactivation sequence> to state <Failure>\n\r5) NVM write access was NOT successful\n\r6) the system was in the state <Deactivation sequence> for more than VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds\n\rTHEN:\n\rthe internal counter failed write access is raised by 1\n\r \n\r\n\rELSE:\n\rthe internal counter failed write access remains at its last value",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}

IF: 

internal counter failed write access is greater than VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_NVMWrMaxAlw

THEN:

CFBVSSAFE_s_DiagOruCtlNVMWr_StEve shall be equal to VMMP_c_DiagEveSigFail

ELSE:

CFBVSSAFE_s_DiagOruCtlNVMWr_StEve shall be equal to VMMP_c_DiagEveSigNone

Information for Tester:

This output describes an error because too many NVM write access attempts has been made from the module. To test this output you can for example fulfill all entry conditions for state <Activation sequence> but don't return NVM write access as successfull. Then the module will change from state <Available> to <Activation sequence> to <Failure> back to <Available> every VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds on its own.

{
  "ID": "16666732.0",
  "ASIL": "  QM",
  "Text": "IF: \n\rinternal counter failed write access is greater than VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_NVMWrMaxAlw\n\r \n\rTHEN:\n\rCFBVSSAFE_s_DiagOruCtlNVMWr_StEve shall be equal to VMMP_c_DiagEveSigFail\n\r \n\rELSE:\n\rCFBVSSAFE_s_DiagOruCtlNVMWr_StEve shall be equal to VMMP_c_DiagEveSigNone\n\r \n\rInformation for Tester:\n\rThis output describes an error because too many NVM write access attempts has been made from the module. To test this output you can for example fulfill all entry conditions for state <Activation sequence> but don't return NVM write access as successfull. Then the module will change from state <Available> to <Activation sequence> to <Failure> back to <Available> every VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds on its own.",
  "Type": "Functional",
  "Status": "Released",
  "Summary": "",
  "Relevant": "yes",
  "column_12": "",
  "Foreign ID": "1362349.0",
  "Description": "IF: \n\rinternal counter failed write access is greater than VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_NVMWrMaxAlw\n\r \n\rTHEN:\n\rCFBVSSAFE_s_DiagOruCtlNVMWr_StEve shall be equal to VMMP_c_DiagEveSigFail\n\r \n\rELSE:\n\rCFBVSSAFE_s_DiagOruCtlNVMWr_StEve shall be equal to VMMP_c_DiagEveSigNone\n\r \n\rInformation for Tester:\n\rThis output describes an error because too many NVM write access attempts has been made from the module. To test this output you can for example fulfill all entry conditions for state <Activation sequence> but don't return NVM write access as successfull. Then the module will change from state <Available> to <Activation sequence> to <Failure> back to <Available> every VMMP_CFBVSSAFE_p_OruCtlPrkLckCtl_TiNVMWrMax seconds on its own.",
  "Vehicle Launch": "",
  "Vehicle Platform": "E³ 1.2"
}