Alerts

System ASIC trimming is not completed. The trimming of the ASIC is a step in the production of the System ASIC.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Transfer Error (error frame, wrong address. timeout, CSIH error) is logged if a SPI alert is detected by ASIC or uC.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Data length code error detected.

System will be running with full assistant for driver brake request.

Short circuit between Qx pin and MRAuC pin, MRAuC is actuated (with Qx On) for a short time and check MRG state via MRG_on_SPI bit. If the bit is 0, the alert is logged.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

1.)Brake fluid sensor line is shorted to power supply. 2.)Open line detected at brake fluid sensor line. This monitoring is to detect if brake fluid sensor line is shorted to power supply.

System will request Hydraulic Boost Compensation when driver pressed the brake pedal.

NVM gear ration value is missing when read at startup.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Plunger is inoperable. Alert is raised if Initial Plunger Check fails.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

GTM peripheral of micro controller is not right or reference clock from system ASIC (D_REF) is faulty or there is any fault in signal path from ASIC to micro controller. A 4kHz reference frequency signal from system ASIC is cyclically checked via GTM to be in correct range.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Erroneous safety logic (Valve relay gate does not switch on or feedback of system chip is wrong), The failsafe logic test switches on the valve relay and checks whether the gate actuation (system chip internally) is possible, If not, this fault is set.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Erroneous safety logic (the BIST state machine of the system chip could be activated by a wrong BIST command value), The failsafe logic test tests whether the BIST state machine does detect and suppress a wrong BIST command value. This alert is logged if the watchdog of the system chip is triggered by the wrong BIST command value.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Erroneous safety logic (e.g. watchdog trigger is not detected by system chip, unintended setting of alert flip-flop within system chip). After the failsafe logic test has finished the status of the watchdog or rather the safety logic is being continuously monitored. If the status is not as expected this fault is logged.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Erroneous safety logic within system chip or feedback of system chip is wrong. During failsafe logic test the watchdog status feedback from the system chip is tested against several patterns according to the ongoing sub test. If the watchdog status is not as expected this fault is logged.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

System chip does not switch off the valve relay gate actuation via SPI or the feedback bit does report a wrong status, The failsafe logic test tests whether the system chip can switch off the gate actuation of the valve relay via SPI command. If the feedback does not show a switched off valve relay gate this fault is set.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Erroneous safety logic (Watchdog timeout detection of system chip erroneous). The failsafe logic test tests whether the system chip detects a missing watchdog trigger and therefore swichtes off the gate actuation of the valve relay. If the feedback does not show a switched off valve relay gate this fault is set.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Erroneous safety logic (e.g. BIST of system IC either does not detect a correct BIST command or missing BIST commands), The failsafe logic test tests whether the watchdog of the system chip can be started with the first watchdog trigger signal from the BIST state machine. Additionally it is tested that the watchdog switches off hydraulically respective electrically if the BIST state machine is not triggered during the corresponding timeout times.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Error pin event counter within system chip does not increment on error pin event. The failsafe logic test pulls the error pin to test the error pin event counter within the system chip.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

Interruption or short to GND of a monitored ECU internal enable line. After the failsafe logic test has finished the ECU internal enable lines are monitored. It is expected that the enable lines always stay at high level (except the SW intends another state). If this is not the case this fault is logged.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

ECU internal electrical enable line has either a short to 3.3V or cannot be switched off by the micro controller or the system chip. Initial test of the ECU internal hydraulic enable line detects that enable line cannot be switched off by the software.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

ECU internal hydraulical enable line has either a short to ground or cannot be switched on by the micro controller and the system chip. Initial test of the ECU internal hydraulic enable line detects that enable line cannot be switched on by the software.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.

ECU internal electrical enable line has either a short to 3.3V or cannot be switched off by the micro controller or the system chip. Initial test of the ECU internal electrical enable line detects that enable line cannot be switched off by the software.

System will be running in fully degraded state. Braking may require increased effort. Hydraulic Boost Compensation will be triggered when driver pressed brake pedal.