AUTOSAR CP SRS FunctionInhibitionManager
AUTOSAR CP SRS FunctionInhibitionManager
AUTOSAR CP SRS FunctionInhibitionManager
AUTOSAR CP R23-11
Requirements on Function
Document Title Inhibition Manager
Document Owner AUTOSAR
Document Responsibility AUTOSAR
Document Identification No 81
4
AUTOSAR
• Fim considers EventAvailbilty/
2015-07-31 4.2.2 Release
EventSuppression
Management
AUTOSAR
2014-10-31 4.2.1 Release • Editorial changes
Management
AUTOSAR
2013-10-31 4.1.2 Release • Editorial changes
Management
AUTOSAR
2013-03-15 4.1.1 • Editorial changes
Administration
• Add traceability to features
AUTOSAR • Apply new template ([1,
2010-09-30 3.1.5
Administration TPS_STDT_00078]) for each SRS
requirement
• Document structure reworked and
extended
AUTOSAR
2010-09-30 3.1.5
Administration • Added requirement for RTE API
Disclaimer
This work (specification and/or software implementation) and the material contained in
it, as released by AUTOSAR, is for the purpose of information only. AUTOSAR and the
companies that have contributed to it shall not be liable for any use of the work.
The material contained in this work is protected by copyright and other types of intel-
lectual property rights. The commercial exploitation of the material contained in this
work requires a license to such intellectual property rights.
This work may be utilized or reproduced without any modification, in any form or by
any means, for informational purposes only. For any other purpose, no part of the work
may be utilized or reproduced, in any form or by any means, without permission in
writing from the publisher.
The work has been developed for automotive applications only. It has neither been
developed, nor tested for non-automotive applications.
The word AUTOSAR and the AUTOSAR logo are registered trademarks.
Contents
1 Scope of document 6
4 Requirement Specification 11
4.1 Functional Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
4.2 Functional Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
4.2.1 Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
4.2.1.1 [SRS_Fim_04701] The Functionalities supervised by
the FIM shall be defined by static configuration . . . . 12
4.2.1.2 [SRS_Fim_04702] The FIM shall support different in-
hibit options . . . . . . . . . . . . . . . . . . . . . . . . 12
4.2.1.3 [SRS_Fim_04719] Mechanism for summarized diag-
nostic event states shall be provided . . . . . . . . . . 13
4.2.1.4 [SRS_Fim_04706] Individual configuration of inhibit
conditions of functionalities shall be available . . . . . 13
4.2.2 Initialization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
4.2.2.1 [SRS_Fim_04712] The permission states at start up
shall be initialized . . . . . . . . . . . . . . . . . . . . . 14
4.2.3 Normal Operation . . . . . . . . . . . . . . . . . . . . . . . . . 14
4.2.3.1 [SRS_Fim_04700] An Interface for querying the FID
permission status shall be provided . . . . . . . . . . . 14
4.2.3.2 [SRS_Fim_04709] The permission state shall be
evaluated before executing functionalities . . . . . . . 15
4.2.3.3 [SRS_Fim_04713] Methods for the computation of
permission states shall be provided . . . . . . . . . . . 15
4.2.3.4 [SRS_Fim_04717] The permission states shall be
updated . . . . . . . . . . . . . . . . . . . . . . . . . . 16
4.2.3.5 [SRS_Fim_04723] The FIM shall provide a boolean
configuration option per FID. . . . . . . . . . . . . . . . 16
4.2.3.6 [SRS_Fim_04721] OBD Functionalities shall be sup-
ported . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
4.2.4 ShutDown Operation . . . . . . . . . . . . . . . . . . . . . . . 17
4.2.5 Fault Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
4.3 Non-Functional Requirements . . . . . . . . . . . . . . . . . . . . . . . . 17
4.3.1 Timing Requirements . . . . . . . . . . . . . . . . . . . . . . . 17
4.3.2 Resource Usage . . . . . . . . . . . . . . . . . . . . . . . . . . 17
5 Requirements Tracing 18
6 References 19
1 Scope of document
The goal of AUTOSAR in particular working on the Function Inhibition Manager and this
document is to define requirements on the functionality of the FIM. The focus is on the
scope of the FIM but also the distinctions to other control mechanisms in AUTOSAR,
such as RTE, and also to what extent elements of it have to be configurable and what
preliminaries they shall comply with to meet the tailoring requirements.
If such the definition of these new elements is not part of this work package. Neverthe-
less the information about basic software elements additionally required shall be given
to related work groups.
Constraints
First scope for specification of requirements on basic software modules are systems
which are not safety relevant. For implementation of the basic software modules in
safety relevant systems, it shall be checked if additional requirements are necessary.
4
Abbreviation / Acronym: Description:
Runnable entity A Runnable Entity is a part of an Atomic Software-Component which can be executed and
scheduled independently from the other Runnable Entities of this Atomic
Software-Component. It is described by a sequence of instructions that can be started by the
RTE. Each runnable entity is associated with exactly one EntryPoint.
SW-C Software Components
Xxx_ Placeholder for an API provider
4 Requirement Specification
4.2.1 Configuration
c()
The FIM shall support different inhibit options. The possible inhibit options are
based on Dem_EventStatusExtendedType (TestFailed, Passed, ...) being
Description: provided by the DEM. The FIM shall at least support inhibition due to event
state "failed". The exchange of information between DEM and FIM is ensured
by forwarding the extended event status. The reactions of the FIM can only be
based on that.
The most common reaction upon detected failure is to deactivate affected
Rationale:
functionalities. Therefore, the FIM shall support inhibit due to "failed".
If an important sensor fails, e.g. adaptation functionality shall be stopped in
Use Case: order to prevent wrong adaptation values.
Supporting AUTOSAR_SWS_DEM
Material:
c()
c()
The FIM shall be configured per FID to relate events to it in a flexible way. The
event - FID (inhibit) relation shall be changeable by calibration within configured
Description: limits, e.g. number of FIDs, supported inhibit masks, etc. Note, that
summarized events could also be considered here ([SRS_Fim_04719]
Mechanism for summarized diagnostic event states shall be provided).
The result of a fault is the reduction of available functionality. This must be
Rationale: configured by the related information of faults and SW-components.
Fault of oxygen sensor will lead to the reporting of a respective event and then
Use Case: to a reduced functionality of the catalyst diagnostics.
Supporting –
Material:
c()
4.2.2 Initialization
Based on all restored event status information (not only events stored in the
Description: fault memory) of the DEM, the FIM needs to compute the permission state for
all FIDs at the initialization.
Necessity for the FIM to get notified of events which may affect the permission
Rationale:
of FIDs.
Use Case: –
Supporting –
Material:
c()
c()
c()
The FIM shall provide methods for the computation of permission status of an
individual FID. The permission status yields from the diagnostic event states
Description:
related to the FID. These event states are reported to the DEM and then
forwarded to the FIM (SRS_Fim_04700
The focus of this requirement is on providing the methods for the computation
Rationale: of the permission state. It shall not be explicitly required to store the permission
state of an FID or to compute it upon request for permission.
Suppose FID_alpha shall be inhibited by event_1 or event_2, hence the
permission state of FID_alpha depends on the status of event_1 and event_2.
Use Case: Upon request of permission of FID_alpha the states of event_1 and event_2
could be evaluated. Alternatively, the status information of FID_alpha could be
provided which is updated whenever event_1 or event_2 is changed.
Supporting –
Material:
c()
The FIM shall provide an API to the DEM in order to get informed about
Description: relevant status changes of reported events. Then, the status of the relevant
FIDs can be updated.
Necessity for the FIM to get notified of events which may affect the permission
Rationale:
of FIDs.
Use Case: –
Supporting –
Material:
c()
[SRS_Fim_04723] The FIM shall provide a boolean configuration option per FID.
d
Description: The FIM shall provide a boolean configuration option per FID.
Rationale: Use case-specific configuration of functionality, only required
Rationale:
functionality may be executed in ECU.
Use Case: Use Case: Variant coding.
Supporting –
Material:
c(RS_Main_00010, RS_Main_00491)
c()
No requirement
No requirement
No requirements
5 Requirements Tracing
The following table references the features specified in [3] and links to the fulfillments
of these.
Requirement Description Satisfied by
[RS_Main_00010] Safety Mechanisms [SRS_Fim_04723]
[RS_Main_00491] Function Monitoring [SRS_Fim_04723]
6 References
6.2.1 ITEA-EAST
none
none
none
none
Number Heading
[SRS_Fim_04700] An Interface for querying the FID permission status shall be provided
The Functionalities supervised by the FIM shall be defined by static
[SRS_Fim_04701]
configuration
[SRS_Fim_04702] The FIM shall support different inhibit options
5
4
Number Heading
Individual configuration of inhibit conditions of functionalities shall be
[SRS_Fim_04706]
available
[SRS_Fim_04709] The permission state shall be evaluated before executing functionalities
[SRS_Fim_04712] The permission states at start up shall be initialized
[SRS_Fim_04713] Methods for the computation of permission states shall be provided
[SRS_Fim_04717] The permission states shall be updated
[SRS_Fim_04719] Mechanism for summarized diagnostic event states shall be provided
[SRS_Fim_04721] OBD Functionalities shall be supported
[SRS_Fim_04723] The FIM shall provide a boolean configuration option per FID.
Table A.1: Changed Requirements in R22-11
none