This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Component Design

1 - A4412 WD State Diagram 2015_06_09

Visio-A4412 Diagrams 2015_03_16.vsdx

2 - A4412 WD State Diagram 2015_06_09_ind

Page 1

3 - A4412 WD State Diagram 2015_06_09s

 WD_RESTART
 WD_RESTART
Bad Pulses not 
Recieved
 WD_RESTART
Test 
Power On
POE High
One Clock 
Complete
Cycle
Off
Idle
Test Hunt
Test Lock
Running Hunt
POE Low
 WD_RESTART
FLASH_MODE
FLASH_MODE
POE High
FLASH_MODE
Reflash
Running
WD_F = 0
FLASH_MODE
POE High
FLASH_MODE
No WD_RESTART
tPS_DISABLE = 0
WD_F = 1
tPS_DISABLE = 0
 WD_RESTART
POE Low
WD_F = 1
 WD_RESTART
WD_F = 1
POE Low
POE Low
Watchdog
No WD_RESTART

4 - EA4 NTC 0x040 TmplMonrRunTimeFlt

Slide 1

NTC Temporal Monitor Run Fault
Overview - NTC 0x041

FDD: ES005A

Description:

This diagnostic is responsible for detecting Temporal Monitor Run Time faults.

Diagnostic Overview:

The temporal Monitor Function monitors the POE output of the Temporal Monitor IC (A4412) and if the POE is low, A SPI message is sent to the IC to check the type of Fault (WatchDog Fault or Non-WatchDog Fault). This Fault is captured by NTC 0x041.

Typical Fault Response:  

    • F3  Failure
       

Probable Sources (Most to Least Probable):

      • Temporal Monitor IC(A4412) fault. 

      • WD_Monitor pulse fault. 

      • POE fault. 

Initialization

 

Periodic

X

Event

 

Bit

Cause

0

WatchDog type Failure

1

Non-WatchDog type Failure.

2

Unused

3

Unused

4

Unused

5

Unused

6

Unused

7

Unused

Rev

Revision

 

Initial Release

  
  
  
  
  
  
  
  
  

Revision Log

5 - EA4 NTC 0x041 TmplMonrInitFlt

Slide 1

NTC Temporal Monitor Init Fault
Overview - NTC 0x040

FDD: ES005A

Description:

This diagnostic is responsible for detecting Temporal Monitor Initialization faults.

Diagnostic Overview:

The temporal Monitor initialization has a sequence of events. Faults at any one of these events are captured by the NTC 0x040. The sequence of events are monitored by a counter variable TmplMonrInitCntr.

Typical Fault Response:  

    • F1  Failure
       

Probable Sources (Most to Least Probable):

      • Temporal Monitor IC(A4412) fault. 

      • Temporal Monitor SPI fault. 

      • WD_Monitor pulse fault. 

      • POE fault. 

Initialization

 

Periodic

X

Event

 

Bit

Cause

0

Fault Occured Between TmplMonrInitCntr =  10 ~ 11

1

Fault Occured Between TmplMonrInitCntr = 13(AND Gate Fault)

2

Fault Occured Between TmplMonrInitCntr = 15 ~ 16

3

Fault Occured at TmplMonrInitCntr = 18 (POE Fault)

4

Fault Occured at TmplMonrInitCntr = 19 (WD_STATE Fault)

5

Fault Occured at TmplMonrInitCntr = 21 (Edge/Valid Write Fault)

6

Fault Occured at TmplMonrInitCntr = 53 (POE + Non-WD Fault)

7

Fault Occured at TmplMonrInitCntr = 53 (POE + WD Fault)

Rev

Revision

 

Initial Release

  
  
  
  
  
  
  
  
  

Revision Log

6 - ES005 TmplMonr Requirements

0000c46a

7 - ES005 TmplMonr Requirements_ind

Page 1
Page 2
Page 3
Page 4
Page 5
Page 6
Page 7

8 - ES005 TmplMonr Requirementss

/ESG Group/FDD Module Requirements/EA4 Specific
ES005A_TmplMonr
Besilened v2.0 and Released
Version: 2.0
Printed by: Nayeem Mahmud
Printed on: Friday, July 31, 2015
Generated from DOORS 9.3.0.7

Contents
1
Interface Requirements
1
1.1
Definitions
1
1.1.1
Inputs
1
1.1.2
Outputs
1
1.1.3
Internally Defined Terms
1
2
Requirements
2
2.1
Primary Functional Requirements
2
2.2
Hardware Requirements
2
2.3
Software Requirements
2
2.3.1
Functional Requirements
2
2.3.1.1
Sub Function: Temporal Monitor Signal Generation
2
2.3.1.2
Sub Function: Temporal Monitor Initialization
2
2.3.1.3
Sub Function: Temporal Monitor Run
3
2.4
Diagnostic Requirements
3
2.4.1
Temporal Monitor Init Test Fault (NTC0x040) 
3
2.4.1.1
Required Debounce Strategy
3
2.4.1.2
Requirements to Perform Diagnostic Test Conditions
3
2.4.1.3
Test Condition Negative Requirements
3
2.4.1.4
Test Condition Positive Requirements
4
2.4.2
Temporal Monitor Run Fault (NTC0x041) 
4
2.4.2.1
Required Debounce Strategy
4
2.4.2.2
Requirements to Perform Diagnostic Test Conditions
4
2.4.2.3
Test Condition Negative Requirements
4
2.4.2.4
Test Condition Positive Requirements
5
2.5
Manufacturing Requirements
5
Contents
ii

ID
Besilened v2.0 and Released
ES005A
1 Interface Requirements
_7
ES005A
1.1 Definitions
_8
ES005A
1.1.1 Inputs
_9
ES005A
PwrOutpEnaFb : A physical feedback input signal to verify that temporal monitor function is properly 
_92
working.
ES005A
NErr: An input signal used to decide PwrOutpEna hi or low state.
_93
ES005A
StrtUpSt : Startup State enumeration input is used to decide when Temporal Monitor function should 
_106
start.
ES005A
1.1.2 Outputs
_13
ES005A
PwrOutpEna : This physical output when driven high will enable power to the Gate Drive(s).
_96
ES005A
TmplMonrIninTestCmpl : An output flag to notify Temporal Monitor Initializaion test completed or 
_97
not-completed.
ES005A
1.1.3 Internally Defined Terms
_100
ES005A
TmplMonrWdg :  Physical square wave output used for Temporal Monitor verification.
_101
ES005A
SysFlt2A : An output signal generated to control the power pass of Gate Drive A.
_102
ES005A
SysFlt2B : An output signal generated to control the power pass of Gate Drive B.
_103
Page 1 of 5
Printed Friday, July 31, 2015

ID
Besilened v2.0 and Released
ES005A
2 Requirements
_20
ES005A
2.1 Primary Functional Requirements
_21
ES005A
The Temporal Monitor function shall detect an error of ±11% in the Primary Processor clock within 
_144
200ms.
ES005A
The Temporal Monitor function shall provide a mechanism to store its sequence number 
_169
(TmplMonrIninCntr) into the per-instance menory.
ES005A
2.2 Hardware Requirements
_22
ES005A
None
_126
ES005A
2.3 Software Requirements
_23
ES005A
2.3.1 Functional Requirements
_24
ES005A
2.3.1.1 Sub Function: Temporal Monitor Signal Generation
_25
ES005A
The Temporal Monitor function shall generate TmplMonrWdg square wave signal with the following 
_29
characteristics.
Period = 2ms ± 0.12ms
Duty Cycle =  50 ± 30%
2V < Vmax  < 5 V
-0.1 V > Vmin <  0.5 V
ES005A
The Temporal Monitor function shall generate TmplMonrWdg signal by toggling a GPIO pin from 
_104
Temporal Monitor Software Function.
ES005A
2.3.1.2 Sub Function: Temporal Monitor Initialization
_31
ES005A
The Temporal Monitor function shall perform initialization test at Warm Init state once per ignition 
_32
cycle.
ES005A
The Temporal Monitor function shall start Temporal Monitor Initialization when StrtUpSt = 
_108
ELECGLBPRM_STRTUPSTTMPLMONININTESTSTRT_CNT_U08 & TmplMonrIninTestCmplFlg 
= 1.
ES005A
The Temporal Monitor Function shall generate TmplMonrWdg for 8 periodic execution followed by a 
_107
constant LOW value signal for 8 periodic execution as part of Temporal Monitor Initialization.
Page 2 of 5
Printed Friday, July 31, 2015

ID
Besilened v2.0 and Released
ES005A
The Temporal Monitor Function shall verify that it has control over PwrOutpEna signal by forcing a 
_167
fault and monitoring the feedback signal.
ES005A
The Temporal Monitor function shall issue a FLASH_MODE command through SPI if re-flash is 
_110
requested.
ES005A
The Temporal Monitor function shall issue a WD_RESTART command through SPI to get out of flash 
_111
mode once re-programming is done.
ES005A
2.3.1.3 Sub Function: Temporal Monitor Run
_122
ES005A
The Temporal Monitor function shall increment the internal valid counter value by 1 if 10 subsequent 
_168
rising edges of 2 ms ± 0.12 ms square wave pulses are present over a 20 ms moving window after the 
Temporal Monitor Initialization..
ES005A
The Temporal Monitor function shall qualify TmplMonrWdg signal when the internal valid counter 
_125
value reaches to a predefined SPI configured value.
ES005A
The Temporal Monitor function shall continue monitoring and qualifying the TmplMonrWdg signal 
_124
during the rest of the ignition cycle.
ES005A
2.4 Diagnostic Requirements
_145
ES005A
2.4.1 Temporal Monitor Init Test Fault (NTC0x040) 
_146
ES005A
2.4.1.1 Required Debounce Strategy
_147
ES005A
The Temporal Monitor function use the  Immediate fault strategy for NTC0x040.
_157
ES005A
2.4.1.2 Requirements to Perform Diagnostic Test Conditions
_149
ES005A
The Temporal Monitor function shall perform the test condition for NTC0x040 during the Temporal 
_158
Monitor Initialization and only once per ignition cycle.
ES005A
The Temporal Monitor function shall perform the test condition for NTC0x040 during the sequence 
_170
number (TmplMonrIninCntr) 8 to 50.
ES005A
2.4.1.3 Test Condition Negative Requirements
_150
ES005A
The Temporal Monitor function shall provide a negative result for NTC0x040, when the  sequence 
_163
number is 8-10 and PwrOutpEna is not High. 
Page 3 of 5
Printed Friday, July 31, 2015

ID
Besilened v2.0 and Released
ES005A
The Temporal Monitor function shall provide a negative result for NTC0x040, when the  sequence 
_171
number is 12 and PwrOutpEna is not Low. 
ES005A
The Temporal Monitor function shall provide a negative result for NTC0x040, when the  sequence 
_172
number is 13-15 and PwrOutpEna is not High. 
ES005A
The Temporal Monitor function shall provide a negative result for NTC0x040, when the  sequence 
_173
number is 16 and PwrOutpEna is not Low. 
ES005A
The Temporal Monitor function shall provide a negative result for NTC0x040, when the  sequence 
_177
number is 17 and Watchdog State = Idle or Flash or Test Hunt or Watchdog. 
ES005A
The Temporal Monitor function shall provide a negative result for NTC0x040, when the  sequence 
_176
number is 19 and Edge and Valid Counter value is not written properly.
ES005A
The Temporal Monitor function shall provide a negative result for NTC0x040, when the  sequence 
_175
number is 50 and PwrOutpEna is LOW and Watchdog State = Watchdog.
ES005A
The Temporal Monitor function shall provide a negative result for NTC0x040, when the  sequence 
_178
number is 50 and PwrOutpEna is LOW and Watchdog State is not Watchdog.
ES005A
2.4.1.4 Test Condition Positive Requirements
_151
ES005A
The Temporal Monitor function shall provide a positive result to the test condition for NTC 0x040 
_164
when none of the negative result requirements are satisfied.
ES005A
2.4.2 Temporal Monitor Run Fault (NTC0x041) 
_152
ES005A
2.4.2.1 Required Debounce Strategy
_153
ES005A
The Temporal Monitor function use the  Immediate fault strategy for NTC0x041.
_159
ES005A
2.4.2.2 Requirements to Perform Diagnostic Test Conditions
_154
ES005A
The Temporal Monitor function shall perform the test condition for NTC0x041 in ENABLE..
_160
ES005A
The Temporal Monitor function shall perform the test condition for NTC0x041 when the sequesnce 
_174
number is greater than 50.
ES005A
2.4.2.3 Test Condition Negative Requirements
_155
Page 4 of 5
Printed Friday, July 31, 2015

ID
Besilened v2.0 and Released
ES005A
The Temporal Monitor function shall provide a negative result for NTC0x041, when the  sequence 
_165
number is 51 PwrOutpEna is LOW and Watchdog State is Watchdog.
ES005A
The Temporal Monitor function shall provide a negative result for NTC0x041, when the  sequence 
_179
number is 51 PwrOutpEna is LOW and Watchdog State is not Watchdog.
ES005A
2.4.2.4 Test Condition Positive Requirements
_156
ES005A
The Temporal Monitor function shall provide a positive result to the test condition for NTC 0x041 
_166
when none of the negative result requirements are satisfied.
ES005A
2.5 Manufacturing Requirements
_161
ES005A
None.
_162
Page 5 of 5
Printed Friday, July 31, 2015

9 - ES005A_SwDfmea_HwInputs

Component Number:ES005A





Component Long Name:






Component Short Name:TmplMonr





Component Version:2.6.0





Review Date:






Matrix Template Version:




















Outputs



Signal NamePwrOutpEnaTmplMonrIninTestCmpl





InputsPwrOutEnaFbHighHigh














































































Notes:



Legend

High:Output is off by a major value, such as incorrect sign, incorrect Boolean, or value is drastically impacting the output. Other reasons to mark as "High" are if the value is safety critical, unknown impact to a output.



Low:Value is off by a minor value that will have no affect to the functionality of component/subfunction it belongs to. Minor value is up to discretion of FDD owner (example would be if hand-wheel torque value with resolution of 0.01 is off by 0.02 where hand-wheel torque is not noticeable at that value.)



No Affect:Input does not affect the output in any way.


10 - ES005A_SwDfmea_HwOutputs

Component Number:ES005A





Component Long Name:






Component Short Name:TmplMonr





Component Version:2.6.0





Review Date:






Matrix Template Version:




















Outputs



Signal NameTmplMonrWdgSysFlt2ASysFlt2B




InputsNErrHIghHIghHIgh




PwrOutpEnaFbHIghHIghHIgh




StrtUpStHighHighHigh



























































Notes:



Legend

High:Output is off by a major value, such as incorrect sign, incorrect Boolean, or value is drastically impacting the output. Other reasons to mark as "High" are if the value is safety critical, unknown impact to a output.



Low:Value is off by a minor value that will have no affect to the functionality of component/subfunction it belongs to. Minor value is up to discretion of FDD owner (example would be if hand-wheel torque value with resolution of 0.01 is off by 0.02 where hand-wheel torque is not noticeable at that value.)



No Affect:Input does not affect the output in any way.


11 - ES005A_TmplMonr_Design_FDD_CheckList

Nexteer_Template_V1.0

Overview

Peer Review Instructions
Technical Review Checklist
Template Change Log


Sheet 1: Peer Review Instructions

Instructions for Functional Design Package Peer Review




PRE-MEETING


Function OwnerConfirm that requirements are reviewed and approved PRIOR to the FDP peer review

Function OwnerStart with latest version of the template for any "first reviews" - Continue to use existing temmplate for re-reviews

Function OwnerProvide the functional design package (changed documents) to the invited attendees 1-2 working days in advance of review

Function OwnerNotify the assigned peer reviewer and make sure they are prepared to do their function in the meeting

Function OwnerIdentify necessary attendance and invite to meeting

Function OwnerComplete the "Author" column information for sections 1 through 3 prior to the review

Function OwnerComplete the attendance invitation list in section 5

Function OwnerFor Re-reviews only: Complete the column "remarks by author" to identify actions taken to address items found in earlier reviews.



DURING MEETING


Function OwnerPresent document changes to the review team

Peer ReviewerCapture attendance of the review

Peer ReviewerCapture actions and issues in section 4. Identify issue summary, Document type, Reference (Requirement ID, section number, etc), Defect Type and indicate status as "OPEN"



POST MEETING


Function OwnerFollow up on all "open" items. Update "Summary of Resolution" to indicate what was done or decided.

Function OwnerSchedule follow up review OR review open items with peer reviewer and obtain agreement to close

Peer ReviewerClose change request in system and confirm all associated tasks are complete. Upload peer review checklist (this document) with any FDP updates

Sheet 2: Technical Review Checklist

Technical Review Checklist - Template Version 01.00.09







Product NameElectric Power SteeringElectrical Arch.4Review ScopeDefect TypeNumbers




YesClosedFR
Function NameES005A Temporal MonitorVersion2.7.0Added logic to set SysFlt2A and2BRequirement0




NoRejectedFDD
AuthorRaghavendran Mohan

Interface0




NAOpenModel


EffortDesign0






FMEA


Review Effort(Hrs.)1.00Standards0






*.m File


Corr+Verf effort(Hrs.)
Documentation0






Cal Process


Total Effort (Hrs.)1.00Others0













Total0







Checklist No.Description of CheckAuthor: This column is for Self review. Author shall fill Yes/No/NA against each point in checklist. AuthorAuthor: This column is for reviewer. Reviewer shall fill Yes/No/NA against each point in checklist. ReviewerAuthor: Detailed Description of the finding shall be provided by the reviewer. Description of finding by reviewerAuthor: Defect type to be selected. Defect TypeAuthor: What action is taken to fix the comment & other remarks need to be filled by author. Remarks By AuthorAuthor: Data in this column shall be filled by reviewer after checking whether the rework is completed. Status







1Section 1: TECHNICAL CHECK













1.1Confirm that all signal inputs into the FDP (Functional Design Package) are contained within and exactly named as the "Available_Nexteer_Signals.m" states.YesYes


Closed







1.2Confirm any removed signal inputs from the design have been removed from the "Available_Nexteer_Signals.m" file.NANA











1.3Confirm all signals and parameters (outputs, calibrations, constants, non-volatile memory) used in the *.m file and the design conform to the AutoSAR naming convention documentation.YesYes


Closed







1.4Confirm *.m file has been provided to the "Available_Signal_Names" Author.NoNo


Closed







1.5Confirm Electrical Systems interface map is updated to reflect the FDP (signal IO)YesYes


Closed







1.6Confirm that Static Register evaluation has been completed and updated for any register data that is written to.NANA











1.7Have calibration default values been reviewed for correctness?NANA











2Section 2: Safety CHECKAuthor: This column is for Self review. Author shall fill Yes/No/NA against each point in checklist. AuthorAuthor: This column is for reviewer. Reviewer shall fill Yes/No/NA against each point in checklist. ReviewerAuthor: Detailed Description of the finding shall be provided by the reviewer. Description of finding by reviewerAuthor: Defect type to be selected. Defect TypeAuthor: What action is taken to fix the comment & other remarks need to be filled by author. Remarks By AuthorAuthor: Data in this column shall be filled by reviewer after checking whether the rework is completed. Status







2.1Confirm that the functional DFMEA is up to date based on the design in the current package.NANA











2.2Confirm that Safety requirements (ASIL A - D) are referenced in the design documents.YesYes


Closed







3Section 3: Lessons LearnedAuthor: This column is for Self review. Author shall fill Yes/No/NA against each point in checklist. AuthorAuthor: This column is for reviewer. Reviewer shall fill Yes/No/NA against each point in checklist. ReviewerAuthor: Detailed Description of the finding shall be provided by the reviewer. Description of finding by reviewerAuthor: Defect type to be selected. Defect TypeAuthor: What action is taken to fix the comment & other remarks need to be filled by author. Remarks By AuthorAuthor: Data in this column shall be filled by reviewer after checking whether the rework is completed. Status







3.01Have functions depending upon system state been reviewed for need to be executed at the 2ms rate to avoid system lag issues?YesYes


Closed







3.02Have all diagnostics (NTCs) been confirmed to show logic to invoke a diagnostic "PASS" for control of the status byte at the customer level.YesYes


Closed







3.03Has the requirements traceability steps used the RMI steps as defined in the FDD authoring spec to generate the traceability report?YesYes


Closed







3.04Has the requirements traceability report been verified to only contain ONLY requirements from the FR.NANA











3.05Confirm that all PIM that does NOT have an initialization value of zero is initialized in an INIT function.NANA











3.06Confirm if NVM is used, the NVM is defined in structuresNANA











3.07If the function uses NVM, confirm that the m file uses the SetBlockStatus to indicate a write at powerdownNANA











3.08Confirm NTCs are not set within an IRQ (not related to the typical periodic OS)NANA











3.09Confirm NTCs are not set or read in a periodic rate faster than 2 ms (ex. Motor Control Loop)NANA











3.10Constants check: Do all constants have the correct scope (local, global) and are they defined in the correct location (this FDD, ES/SF/AR999)?YesYes


Closed







3.11Confirm all calibrations are required (ie they cannot be constants)NANA











4Section 4: Issues / Actions IdentifiedDocumentReferenceSummary of resolutionAuthor: Defect type to be selected. Defect TypeAuthor: What action is taken to fix the comment & other remarks need to be filled by author. Remarks By AuthorAuthor: Data in this column shall be filled by reviewer after checking whether the rework is completed. Status







4.1m file Description changes*.m File



Closed







4.2Simulink model updates (changes to foreground colour)Model



Closed







4.3














4.4














4.5














4.6














4.7














4.8














4.9














4.10














4.11














4.12














4.13














4.14














4.15














4.16














4.17














4.18














4.19














4.20














4.21














4.22














4.23














4.24














4.25














5Section 5: APPROVALS













RoleFirst ReviewDateAttendanceApproval?










Function Owner*Raghavendran Mohan11/28/2016YesNo










Peer Reviewer*Sai DesuYes










EPDT Engineer












ES Engineer












Software LeadJayakrishnan ThundathilYes










Hardware Lead<Name - if invited>











Test LeadPooja KusnoorYes










Safety Lead<Name - if invited>











RoleSecond Review (if required)DateAttendanceApproval?










Function Owner*Raghavendran Mohan11/29/2016YesYes










Peer Reviewer*Sai DesuYes










EPDT Engineer












ES Engineer












Software Lead












Hardware Lead<Name - if invited>











Test Lead<Name - if invited>











Safety Lead<Name - if invited>











RoleThird Review (if required)DateAttendanceApproval?










Function Owner*<Owner Name>













Peer Reviewer*<Name>











EPDT Engineer<Name - if invited>











ES Engineer<Name - if invited>











Software Lead<Name - if invited>











Hardware Lead<Name - if invited>











Test Lead<Name - if invited>











Safety Lead<Name - if invited>











RoleFourth Review (if required)DateAttendanceApproval?










Function Owner*<Owner Name>













Peer Reviewer*<Name>











EPDT Engineer<Name - if invited>











ES Engineer<Name - if invited>











Software Lead<Name - if invited>











Hardware Lead<Name - if invited>











Test Lead<Name - if invited>











Safety Lead<Name - if invited>











RoleAdd more if necessaryDateAttendanceApproval?










































P.S.:Yes indicates adherence














No indicates non-adherence, reviewer shall provide suitable comments at the end of this document for each point.














NA indicates not applicable














Sheet 3: Template Change Log

RevChangeAuthor
01.00.05Added lesson learned #3.5MDK
01.00.06Added lesson learned #3.6, 3.7 - Structure and writing of NVM in mfiles and models.MDK
01.00.07Clarified 3.6 and 3.7
Added lessons learned for NTCs not being set in IRQs or periodics faster than 2ms/
MDK
01.00.08Added section 1.6 to look for critical static register analysisMDK
01.00.09Added two checks - default cals and are all cals really required to be a calibrationMDK











































































12 - ES005A_TmplMonr_FR_Review

Nexteer_Template_V1.0

Overview

Peer Review Instructions
Technical Review Checklist


Sheet 1: Peer Review Instructions

Instructions for Functional Requirements Peer Review




PRE-MEETING


Function OwnerConfirm the requirements are completed and frozen prior to the review (no changes after initiating)

Function OwnerStart with latest version of the template for any "first reviews" - Continue to use existing template for re-reviews

Function OwnerProvide the functional requirements (changed documents) to the invited attendees 1-2 working days in advance of review

Function OwnerNotify the assigned peer reviewer and make sure they are prepared to do their function in the meeting

Function OwnerIdentify necessary attendance and invite to meeting

Function OwnerComplete the "Author" column information for sections 1 through 3 prior to the review

Function OwnerComplete the attendance invitation list in section 5

Function OwnerFor Re-reviews only: Complete the column "remarks by author" to identify actions taken to address items found in earlier reviews.



DURING MEETING


Function OwnerPresent document changes to the review team

Peer ReviewerCapture attendance of the review

Peer ReviewerCapture Review Date, Review Action, Review Action Status during the review

Peer ReviewerCapture actions and issues in section 4. Identify issue summary, Document type, Reference (Requirement ID, section number, etc), Defect Type and indicate status as "OPEN"



POST MEETING


Function OwnerFollow up on all "open" items. Update "Summary of Resolution" to indicate what was done or decided.

Function OwnerSchedule follow up review OR review open items with peer reviewer and obtain agreement to close

Peer ReviewerClose change request in system and confirm all associated tasks are complete. Upload peer review checklist (this document) with any FR updates

Sheet 2: Technical Review Checklist

Technical Review Checklist - Template Version 01.00.00







Product NameElectric Power SteeringElectrical Arch.4Review ScopeDefect TypeNumbers




YesClosedFR
Function NameES005A Temporal MonitorTarget Version2.3Added requirment for SysFlt2A and 2BIncorrect Requirement0




NoRejectedFDD
AuthorRaghavendran Mohan

Ambiguous0




NAOpenModel


EffortConflicting0






FMEA


Review Effort(Hrs.)1.00Incorrect Format0






*.m File


Corr+Verf effort(Hrs.)0.00
0






Cal Process


Total Effort (Hrs.)1.00Others0













Total0







Checklist No.Description of CheckAuthor: This column is for Self review. Author shall fill Yes/No/NA against each point in checklist. AuthorAuthor: This column is for reviewer. Reviewer shall fill Yes/No/NA against each point in checklist. ReviewerAuthor: Detailed Description of the finding shall be provided by the reviewer. Description of finding by reviewerAuthor: Defect type to be selected. Defect TypeAuthor: What action is taken to fix the comment & other remarks need to be filled by author. Remarks By AuthorAuthor: Data in this column shall be filled by reviewer after checking whether the rework is completed. Status







1Section 1: TECHNICAL CHECK













1.1All requirements indicated by setting "Is Requirement" attribute to TRUEYes












1.2All requirements start with "The "function" shall…"Yes












1.3All IO to the function have been describedYes












1.4All reviewed requirements documented in the DOORs attributes for review (Review Date, Review Action, Review Action Status)Yes












1.5














2Section 2: Safety CHECKAuthor: This column is for Self review. Author shall fill Yes/No/NA against each point in checklist. AuthorAuthor: This column is for reviewer. Reviewer shall fill Yes/No/NA against each point in checklist. ReviewerAuthor: Detailed Description of the finding shall be provided by the reviewer. Description of finding by reviewerAuthor: Defect type to be selected. Defect TypeAuthor: What action is taken to fix the comment & other remarks need to be filled by author. Remarks By AuthorAuthor: Data in this column shall be filled by reviewer after checking whether the rework is completed. Status







2.1All "Is Requirements" attributes set to TRUE have a completed ASIL attribute identifiedYes












2.2














3Section 3: Lessons LearnedAuthor: This column is for Self review. Author shall fill Yes/No/NA against each point in checklist. AuthorAuthor: This column is for reviewer. Reviewer shall fill Yes/No/NA against each point in checklist. ReviewerAuthor: Detailed Description of the finding shall be provided by the reviewer. Description of finding by reviewerAuthor: Defect type to be selected. Defect TypeAuthor: What action is taken to fix the comment & other remarks need to be filled by author. Remarks By AuthorAuthor: Data in this column shall be filled by reviewer after checking whether the rework is completed. Status







3.1














3.2














4Section 4: Issues / Actions IdentifiedDocumentReferenceSummary of resolutionAuthor: Defect type to be selected. Defect TypeAuthor: What action is taken to fix the comment & other remarks need to be filled by author. Remarks By AuthorAuthor: Data in this column shall be filled by reviewer after checking whether the rework is completed. Status







4.1














4.2














4.3














4.4














4.5














4.6














4.7














4.8














4.9














4.10














4.11














4.12














4.13














4.14














4.15














4.16














4.17














4.18














4.19














4.20














4.21














4.22














4.23














4.24














4.25














5Section 5: APPROVALS













RoleFirst ReviewDateAttendanceApproval?










Function Owner*
Raghavendran Mohan
11/28/2016YesYes










Peer Reviewer*Sai DesuYes










EPDT Engineer<Name - if invited>











ES Engineer












Software LeadJayakrishnan ThundathilYes










Hardware Lead<Name - if invited>











Test LeadPooja KusnoorYes










Safety Lead<Name - if invited>











RoleSecond Review (if required)DateAttendanceApproval?










Function Owner*














Peer Reviewer*













EPDT Engineer<Name - if invited>












ES Engineer<Name - if invited>












Software Lead<Name - if invited>












Hardware Lead<Name - if invited>












Test Lead<Name - if invited>












Safety Lead<Name - if invited>












RoleThird Review (if required)DateAttendanceApproval?










Function Owner*<Owner Name>













Peer Reviewer*<Name>












EPDT Engineer<Name - if invited>












ES Engineer<Name - if invited>












Software Lead<Name - if invited>












Hardware Lead<Name - if invited>












Test Lead<Name - if invited>












Safety Lead<Name - if invited>












RoleFourth Review (if required)DateAttendanceApproval?










Function Owner*<Owner Name>













Peer Reviewer*<Name>












EPDT Engineer<Name - if invited>












ES Engineer<Name - if invited>












Software Lead<Name - if invited>












Hardware Lead<Name - if invited>












Test Lead<Name - if invited>












Safety Lead<Name - if invited>












RoleAdd more if necessaryDateAttendanceApproval?










































P.S.:Yes indicates adherence














No indicates non-adherence, reviewer shall provide suitable comments at the end of this document for each point.














NA indicates not applicable













13 - Temporal Monitor Operation - Graphical Representation

Visio-Temporal Monitor Init Test.vsd

14 - Temporal Monitor Operation - Graphical Representation_ind

Page 1

15 - Temporal Monitor Operation - Graphical Representations



















































































































































































??ms
18ms
4ms
4ms
8ms
8ms
20ms
20ms
20ms
Normal Operation
NPOR
TMF Initialization Test
TMF Run
TMF Start
106 ms
SYSFLT2A &
Warm 
SYSFLT2B
Init TC
0
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
30
31
40
41
50
51
52
53
nERROR
(SYSFLT3)
Test 
Complete
Idle
Test Hunt
Test Lock
Running Hunt
RUNNING
Timer
WD_IN
18ms
Default:
SPI Reconfiguration:
Default SPI 
SPI 
VALID = 00 [2]
VALID = 10 [6]
Configuration
Reconfiguration
EDGE  = 00 [4]
EDGE  = 11 [10]
EDGE 
CNT
6
5
4
3
2
1
1
VALID 
0
CNT
16.68ms
WD_EN
 
 0x40.6
TC
 0x40.7
N
 0x40.2
 0x40.3
 0x40.4
 0x40.5
 0x40.1
TC
(2)
TC
(4)
TC
(8)
TC
(16)
TC
(32)
N
TC
TC
20ms
N
N
(64, 128)
0x40.0 (1)
N
N
N
N
POE
V5CAN_EN
Timer
TMF waiting for the 
h
 
r
/
 if
 if 
g
/
/
w
C
 if 
E
g
ig
E
H
te
e

W

 T
g
e
e
E
H
 Lo
O
O
IG
llin
ta
ffe
d
g
g
O
NPOR 
First set of valid pulses – 8 Pulses
Start of the 
 H
 =
u
d
d
Start of the second series of valid pulses
isin
IG
rro
d
 P
rro
d
 P
a
E
 S
&
 B
 E
lid
 E
lid
 E
lid
 P
LOW
first set of valid 
E
E
 F
T
d
a
a
a
Second set of 10 Valid Pulses
Third set of 10 Valid Pulses
 R
Normal Operation Continues
16ms
Invalid Pulses
n
ck
n
ck
E
A
a
d
V
d
V
d
V
rce
E
ck
e
It is LO
rce
e
O
T
e
a
rite
a
a
(20ms)
e
pulses
o
it is H
O
it is H
F
h
o
h
P
S
R
e
e
e
h
C
F
C
R
W
R
R
P
C
File Name
Max Limit 250ms
Max Limit 250ms
Temporal Monitor Init Test: Normal Test Sequence
Revised
Page
DRAWN BY
08.05.2015
1 of 3
Nayeem Mahmud

16 - WATCHDOG_CALC_ANALYSIS__NM_01OC14___NEW







slower clk
faster clk


Nexteer Clock Tolerrance
Nexteer System Requirements



































mintypmax


Faster ClockmsSlower Clock
Shorter Period
Longer Period


































Nexteer CLK Variation =
0.10
ms

-1.250%81.250%
-11.000%%11.000%


Edge Counter =10Options: 4, 6, 8, 10

























A4412 Freq. Variation-4.000%%4.000%Hz

Minimum Inner Tol. Boundaries
Max Outer Tollerance Boundaries


Valid / Qualifier Counter =4Options: 2, 4, 8, 16

























A4412 period variation4.17%%-3.85%ms











Fault Response Time (ms) =80























































































































Adjuster
Edge Counter
Edge Counter
Edge Counter
Edge Counter
0.010
4
6
8
10




















































Allowed PeriodInput with JitterTimer Values Nominalfaster clockslower clock

Allowed PeriodInput with JitterTimer Values Nominalfaster clockslower clock

Allowed PeriodInput with JitterTimer Values Nominalfaster clockslower clock

Allowed PeriodInput with JitterTimer Values Nominalfaster clockslower clock
Adjuster
Nom Qualifier PeriodWorst Case (min)Worst Case (max)Faster WD_INSlower WD_INMin Timer
(nom)
Max Timer
(nom)
Min Timer
(min)
Max Timer
(min)
Min Timer
(max)
Max Timer
(max)

Nom Qualifier PeriodWorst Case (min)Worst Case (max)Faster WD_INSlower WD_INMin Timer
(nom)
Max Timer
(nom)
Min Timer
(min)
Max Timer
(min)
Min Timer
(max)
Max Timer
(max)

Nom Qualifier PeriodWorst Case (min)Worst Case (max)Faster WD_INSlower WD_INMin Timer
(nom)
Max Timer
(nom)
Min Timer
(min)
Max Timer
(min)
Min Timer
(max)
Max Timer
(max)

Nom Qualifier PeriodWorst Case (min)Worst Case (max)Faster WD_INSlower WD_INMin Timer
(nom)
Max Timer
(nom)
Min Timer
(min)
Max Timer
(min)
Min Timer
(max)
Max Timer
(max)

















































0
87.20728.98887.908.10887.692307692307697.692307692307698.333333333333338.33333333333333
1210.810813.483111.9012.10121211.538461538461511.538461538461512.512.5
1614.414417.977515.9016.10161615.384615384615415.384615384615416.666666666666716.6666666666667
2018.01822.471919.9020.10202019.230769230769219.230769230769220.833333333333320.8333333333333
0.010
87.20728.98887.907.807.968.047.653846153846157.730769230769238.291666666666678.375
1210.810813.483111.9012.1011.9412.0611.480769230769211.596153846153812.437512.5625
1614.414417.977515.9016.1015.9216.0815.307692307692315.461538461538516.583333333333316.75
2018.01822.471919.9020.1019.920.119.134615384615419.326923076923120.729166666666720.9375
0.020
87.20728.98887.908.107.928.087.615384615384627.769230769230778.258.41666666666667
1210.810813.483111.9012.1011.8812.1211.423076923076911.653846153846212.37512.625
1614.414417.977515.9016.1015.8416.1615.230769230769215.538461538461516.516.8333333333333
2018.01822.471919.9020.1019.820.219.038461538461519.423076923076920.62521.0416666666667
0.030
87.20728.98887.908.107.888.127.576923076923087.807692307692318.208333333333338.45833333333333
1210.810813.483111.9012.1011.8212.1811.365384615384611.711538461538512.312512.6875
1614.414417.977515.9016.1015.7616.2415.153846153846215.615384615384616.416666666666716.9166666666667
2018.01822.471919.9020.1019.720.318.942307692307719.519230769230820.520833333333321.1458333333333
0.040
87.20728.98887.908.107.848.167.538461538461547.846153846153858.166666666666678.5
1210.810813.483111.9012.1011.7612.2411.307692307692311.769230769230812.2512.75
1614.414417.977515.9016.1015.6816.3215.076923076923115.692307692307716.333333333333317
2018.01822.471919.9020.1019.620.418.846153846153819.615384615384620.416666666666721.25
0.050
87.20728.98887.908.107.88.27.57.884615384615388.1258.54166666666667
1210.810813.483111.9012.1011.712.311.2511.826923076923112.187512.8125
1614.414417.977515.9016.1015.616.41515.769230769230816.2517.0833333333333
2018.01822.471919.9020.1019.520.518.7519.711538461538520.312521.3541666666667
0.060
87.20728.98887.908.107.768.247.461538461538467.923076923076928.083333333333338.58333333333333
1210.810813.483111.9012.1011.6412.3611.192307692307711.884615384615412.12512.875
1614.414417.977515.9016.1015.5216.4814.923076923076915.846153846153816.166666666666717.1666666666667
2018.01822.471919.9020.1019.420.618.653846153846219.807692307692320.208333333333321.4583333333333
0.070
87.20728.98887.908.107.728.287.423076923076927.961538461538468.041666666666678.625
1210.810813.483111.9012.1011.5812.4211.134615384615411.942307692307712.062512.9375
1614.414417.977515.9016.1015.4416.5614.846153846153815.923076923076916.083333333333317.25
2018.01822.471919.9020.1019.320.718.557692307692319.903846153846220.104166666666721.5625
0.080
87.20728.98887.908.107.688.327.38461538461538888.66666666666667
1210.810813.483111.9012.1011.5212.4811.0769230769231121213
1614.414417.977515.9016.1015.3616.6414.7692307692308161617.3333333333333
2018.01822.471919.9020.1019.220.818.4615384615385202021.6666666666667
0.090
87.20728.98887.908.107.648.367.346153846153858.038461538461547.958333333333338.70833333333333
1210.810813.483111.9012.1011.4612.5411.019230769230812.057692307692311.937513.0625
1614.414417.977515.9016.1015.2816.7214.692307692307716.076923076923115.916666666666717.4166666666667
2018.01822.471919.9020.1019.120.918.365384615384620.096153846153819.895833333333321.7708333333333
0.100
87.20728.98887.908.107.68.47.307692307692318.076923076923087.916666666666678.75
1210.810813.483111.9012.1011.412.610.961538461538512.115384615384611.87513.125
1614.414417.977515.9016.1015.216.814.615384615384616.153846153846215.833333333333317.5
2018.01822.471919.9020.10192118.269230769230820.192307692307719.791666666666721.875
0.110
87.20728.98887.908.107.568.447.269230769230778.115384615384627.8758.79166666666667
1210.810813.483111.9012.1011.3412.6610.903846153846212.173076923076911.812513.1875
1614.414417.977515.9016.1015.1216.8814.538461538461516.230769230769215.7517.5833333333333
2018.01822.471919.9020.1018.921.118.173076923076920.288461538461519.687521.9791666666667
0.120
87.20728.98887.908.107.528.487.230769230769238.153846153846167.833333333333348.83333333333333
1210.810813.483111.9012.1011.2812.7210.846153846153812.230769230769211.7513.25
1614.414417.977515.9016.1015.0416.9614.461538461538516.307692307692315.666666666666717.6666666666667
2018.01822.471919.9020.1018.821.218.076923076923120.384615384615419.583333333333322.0833333333333
0.130
87.20728.98887.908.107.488.527.192307692307698.192307692307697.791666666666678.875
1210.810813.483111.9012.1011.2212.7810.788461538461512.288461538461511.687513.3125
1614.414417.977515.9016.1014.9617.0414.384615384615416.384615384615415.583333333333317.75
2018.01822.471919.9020.1018.721.317.980769230769220.480769230769219.479166666666722.1875
0.140
87.20728.98887.908.107.448.567.153846153846158.230769230769237.758.91666666666667
1210.810813.483111.9012.1011.1612.8410.730769230769212.346153846153811.62513.375
1614.414417.977515.9016.1014.8817.1214.307692307692316.461538461538515.517.8333333333333
2018.01822.471919.9020.1018.621.417.884615384615420.576923076923119.37522.2916666666667
0.150
87.20728.98887.908.107.48.67.115384615384628.269230769230777.708333333333338.95833333333333
1210.810813.483111.9012.1011.112.910.673076923076912.403846153846211.562513.4375
1614.414417.977515.9016.1014.817.214.230769230769216.538461538461515.416666666666717.9166666666667
2018.01822.471919.9020.1018.521.517.788461538461520.673076923076919.270833333333322.3958333333333
0.160
87.20728.98887.908.107.368.647.076923076923088.307692307692317.666666666666679
1210.810813.483111.9012.1011.0412.9610.615384615384612.461538461538511.513.5
1614.414417.977515.9016.1014.7217.2814.153846153846216.615384615384615.333333333333318
2018.01822.471919.9020.1018.421.617.692307692307720.769230769230819.166666666666722.5
0.170
87.20728.98887.908.107.328.687.038461538461548.346153846153857.6259.04166666666667
1210.810813.483111.9012.1010.9813.0210.557692307692312.519230769230811.437513.5625
1614.414417.977515.9016.1014.6417.3614.076923076923116.692307692307715.2518.0833333333333
2018.01822.471919.9020.1018.321.717.596153846153820.865384615384619.062522.6041666666667
0.180
87.20728.98887.908.107.288.7278.384615384615397.583333333333339.08333333333333
1210.810813.483111.9012.1010.9213.0810.512.576923076923111.37513.625
1614.414417.977515.9016.1014.5617.441416.769230769230815.166666666666718.1666666666667
2018.01822.471919.9020.1018.221.817.520.961538461538518.958333333333322.7083333333333
0.190
87.20728.98887.908.107.248.766.961538461538468.423076923076927.541666666666679.125
1210.810813.483111.9012.1010.8613.1410.442307692307712.634615384615411.312513.6875
1614.414417.977515.9016.1014.4817.5213.923076923076916.846153846153815.083333333333318.25
2018.01822.471919.9020.1018.121.917.403846153846221.057692307692318.854166666666722.8125
0.200
87.20728.98887.908.107.28.86.923076923076928.461538461538467.59.16666666666667
1210.810813.483111.9012.1010.813.210.384615384615412.692307692307711.2513.75
1614.414417.977515.9016.1014.417.613.846153846153816.92307692307691518.3333333333333
2018.01822.471919.9020.10182217.307692307692321.153846153846218.7522.9166666666667








































































































Edge Count Options












































46810




converting from frequency requirement to period requirement:




































Qalifier Count Options216243240




= Period/(1-Freq. Tol%)




































432486480










































6487296120










































86496128160










































1080120160200






























































































































































































Allowed PeriodInput with JitterTimer Values Nominalfaster clockslower clock



































edgeadjusterNom Qualifier PeriodWorst Case (min)Worst Case (max)Faster WD_INSlower WD_INMin Timer
(nom)
Max Timer
(nom)
Min Timer
(min)
Max Timer
(min)
Min Timer
(max)
Max Timer
(max)




































10.0000.12020.00018.01822.47219.90020.10018.80021.20018.07720.38519.58322.083






























































































































Values are automatic







































































































































































%-9.910%-9.615%
-2.083%
-0.500%0.500%
1.923%
10.417%12.360%% (ms)










































































































































20.00








































ms18.01818.077
19.583
19.90020.100
20.385
22.08322.472ms




Nexteer CLK Variation =

0.10
ms



































A4412 Freq. Variation-4.000%%4.000%Hz





































120.000125.00130.000Hz





































8.3338.007.692ms











































A4412 period variation4.17%%-3.85%ms




































Critical Edge















































































































































































































min
timer





































































































































18.07719.583
























































































































































































max
timer






































































































































































































20.38522.083









































19.900
































































































20.100


























































































18.018







22.472