ES100A_SysStMod

System States and Modes

FDD #ES100A

1. High Level Description 3

2. Derived Requirements 3

3. Sub-Function Data Flow 3

4. Design Rationale 3

5. Sub-Functions 3

5.1.1. Hardware Related Design 3

5.1.2. Software Related Design 3

6. Timing / Execution Constraints 4

6.1. Rationale / Comments 4

6.2. Rates and State Execution 4

7. Serial Communications Interfaces 4

8. Revision Record & Change Approval 5

High Level Description

This function controls the primary system state machine for the application. New states are computed based on current state and the inputs to the function.

Four states are identified – OFF, WARM INIT, DISABLE and ENABLE.

Derived Requirements

All requirements are contained in the ES100A_SysStMod DOORs module. All requirements are derived.

Sub-Function Data Flow

Refer to the accompanying Simulink Model in the Functional Design Package.

Design Rationale

  1. The design was decided to take a lookup table based approach to allow for future flexibility should it be required. Changes might only require constant changes rather than a redesign.

  2. Transition Vector was developed to cover all current states – see the “Vector Analysis” spreadsheet included in the functional design package.

  3. Inputs for the following place certain requirements on the owning function:

    1. SysStReqDi: Required to indicate TRUE if the state output control function has ramped assist to zero due to the Diagnostic input or the normal operational input. Things like start/stop are excluded from this to prevent transition to disable using that function (for improved start up times).

    2. SysStFltOutpReqDi: Required to indicate TRUE if the diagnostic manager is responsible for removing output and has completed the ramp out (which could be a step in rapid shutdown mode).

Graphical model of the state machine implementation

Sub-Functions

Refer to the accompanying Simulink Model in the Functional Design Package.

Requirements are linked between DOORs FR Document ES100A_SysStMod and the Simulink Model.

None

Refer to the accompanying Simulink Model in the Functional Design Package.

Timing / Execution Constraints

Rationale / Comments

The states and modes function shall be run at the end of the main control loop (2ms). This is to reduce lag in shutdown, requiring all inputs to the state machine to be computed in the same loop prior to executing the function.

Rates and State Execution

In general, the system state columns should be filled in as “Execute” or “Do Not Execute”

Sub-Function NameRate (ms)Cold InitWARM INITENABLEDISABLEOFF
Refer to the *.m file in the Functional Design Package.See m fileDo Not ExecuteExecuteExecuteExecuteExecute

Serial Communications Interfaces

Nexteer Manufacturing Services will be used to read out the SysStMod output (SysSt)

Revision Record & Change Approval

RevDateChange Control #DrwChange Description
01.00.0024FE15EA4_144MKInitial Release
Last modified October 12, 2025: Initial commit (1fadfc4)