SNIP_CLASSIC_WDGM_SECTION_7_1_2_Local_Supervision_Status

7.1.2 Local Supervision Status The Local Supervision Status state machine determines the status of the Supervised Entity. This is done based on the following: 1. Previous value of the Local Supervision Status, 2. Current values of result of Alive Supervision, result of Deadline Supervision, result of Logical Supervision. [SWS_WdgM_00409] Status: DRAFT ⌈The Local Supervision Status state machine shall be calculated in every call of the function WdgM_MainFunction which the Supervised Entity is belonging to.⌋ The Watchdog Manager module provides a feature to provide fault tolerance (corresponding to the local supervision status WDGM_LOCAL_STATUS_FAILED) for Alive Supervision for a configurable amount of (cumulative) time measured in multiples of the Supervision Cycle (Supervision Cycle is the period at which WdgM_MainFunction is called), named Failed Supervision Reference Cycles (see configuration parameter WdgMFailedAliveSupervisionRefCycleTol). If this parameter is set to 0, then there is no tolerance for Alive Supervision and then Alive Supervision behaves in the same way as Deadline Supervision and Logical Supervision, where the first incorrect result causes the transition to WDGM_LOCAL_STATUS_EXPIRED. Note that, Deadline and Logical Supervisions will not be affected by WdgMFailedAliveSupervisionRefCycleTol. [SWS_WdgM_00200] ⌈The Watchdog Manager module shall track the Local Supervision Status of each Supervised Entity.⌋ [SWS_WdgM_91006] shows the state machine for Local Supervision Status of a Supervised Entity with all possible states. [SWS_WdgM_91006] Local Supervision Status ⌈ stm SPEC_WdgM_Local_Supervision_Status WDGM_LOCAL_STATUS_OK WDGM_LOCAL_STATUS_DEACTIVATED WDGM_LOCAL_STATUS_FAILED WDGM_LOCAL_STATUS_EXPIRED (2) (3) (5) (4) (12) (9) (1) (10) (8) (11) (6) (7) ⌋ For the transitions between the states of the Local Supervision Status the following rules apply: [SWS_WdgM_00268] Upstream requirements: SRS_BSW_00101 ⌈If the function WdgM_Init is successfully called, then for each Supervised Entity that is referenced from the Initial Mode (WdgMInitialMode) (i.e. each Supervised Entity that is activated in the Initial Mode), the function WdgM_Init shall set the Local Supervision Status for this Supervised Entity to WDGM_LOCAL_STATUS_OK. And the counter for Failed Supervision Reference Cycles shall be set to zero (0). (see Transition (10) in [SWS_WdgM_91006]).⌋ [SWS_WdgM_00269] Upstream requirements: SRS_BSW_00101 ⌈If the function WdgM_Init is successfully called, then for each Supervised Entity that is not referenced from the Initial Mode (WdgMInitialMode), the function WdgM_Init shall set the Local Supervision Status for this Supervised Entity to WDGM_LOCAL_STATUS_DEACTIVATED (see Transition (11) in [SWS_WdgM_91006]).⌋ [SWS_WdgM_00201] ⌈If all values in three sets of results of Supervision (results of Alive Supervision, results of Deadline Supervision, results of Logical Supervision) for the Supervised Entity are correct and the Supervised Entity was in Local Supervision Status WDGM_LOCAL_STATUS_OK, then the function WdgM_MainFunction shall keep the Supervised Entity in the Local Supervision Status WDGM_LOCAL_STATUS_OK (see Transition (1) in [SWS_WdgM_91006]).⌋ [SWS_WdgM_00202] ⌈If the Supervised Entity was in Local Supervision Status WDGM_LOCAL_STATUS_OK AND: 1. (At least one result of Alive Supervision of the Supervised Entity is incorrect and a Failure Tolerance of zero is configured (see configuration parameter WdgMFailedAliveSupervisionRefCycleTol [ECUC_WdgM_00327]) OR 2. If the result of at least one Deadline Supervision of the Supervised Entity or the result of at least one Logical supervision of the Supervised Entity is incorrect), THEN the function WdgM_MainFunction shall change the Local Supervision Status to WDGM_LOCAL_STATUS_EXPIRED (see Transition (2) in [SWS_WdgM_91006]).⌋ The below requirements show the important difference of Alive Supervision versus Deadline and Logical Supervision: The Alive Supervision has an error tolerance for failed reference cycles. [SWS_WdgM_00203] ⌈If the Supervised Entity was in Local Supervision Status WDGM_LOCAL_STATUS_OK AND: 1. (If the result of at least one Alive Supervision of the Supervised Entity is incorrect and a Failure Tolerance greater than zero is configured (see configuration parameter WdgMFailedAliveSupervisionRefCycleTol [ECUC_WdgM_00327]) AND 2. If all the results of Deadline Supervision of the Supervised Entity and all results of Logical Supervision of the Supervised Entity are correct), THEN the function WdgM_MainFunction shall change the Local Supervision Status to WDGM_LOCAL_STATUS_FAILED and increment the counter for Failed Supervision Reference Cycles (see Transition (3) in [SWS_WdgM_91006]).⌋ [SWS_WdgM_00204] ⌈If the Supervised Entity was in Local Supervision Status WDGM_LOCAL_STATUS_FAILED AND: 1. (If the result of at least one Alive Supervision is incorrect and the counter for Failed Supervision Reference Cycles is less than the configured Failure Tolerance (see parameter WdgMFailedAliveSupervisionRefCycleTol [ECUC_WdgM_00327]) AND 2. If all the results of Deadline Supervisions of the Supervised Entity and all the result of Logical Supervision of the Supervised Entity are correct), THEN the function WdgM_MainFunction shall keep the Local Supervision Status in WDGM_LOCAL_STATUS_FAILED and increment the counter for Failed Supervision Reference Cycles (see Transition (4)in [SWS_WdgM_91006]).⌋ [SWS_WdgM_00300] ⌈If the Supervised Entity was in Local Supervision Status WDGM_LOCAL_STATUS_FAILED AND: 1. (If all the results of Alive Supervision of the Supervised Entity are correct and the counter for Failed Supervision Reference Cycles is > 1) AND 2. If all the result of Deadline Supervision of the Supervised Entity and all the result of Logical Supervision of the Supervised Entity are correct), THEN the function WdgM_MainFunction shall keep the Local Supervision Status in WDGM_LOCAL_STATUS_FAILED and decrement the counter for Failed Supervision Reference Cycles (see Transition (4) in [SWS_WdgM_91006]).⌋ [SWS_WdgM_00205] ⌈If the Supervised Entity was in Local Supervision Status WDGM_LOCAL_STATUS_FAILED AND: 1. (If all the results of Alive Supervision of the Supervised Entity are correct and the counter for Failed Supervision Reference Cycles equals 1) AND 2. If all the results of Deadline Supervisions of the Supervised Entity and all the results of Logical Supervision of the Supervised Entity are correct), THEN the function WdgM_MainFunction shall change the Local Supervision Status to WDGM_LOCAL_STATUS_OK and decrement the counter for Failed Supervision Reference Cycles (see Transition (5) in [SWS_WdgM_91006]).⌋ [SWS_WdgM_00206] ⌈If the Supervised Entity was in Local Supervision Status WDGM_LOCAL_STATUS_FAILED AND: 1. (If at least one result of Alive Supervision is incorrect and the counter for Failed Supervision Reference Cycles is equal to the configured Failure Tolerance (see configuration parameter WdgMFailedAliveSupervisionRefCycleTol [ECUC_WdgM_00327]) OR 2. If at least one result of Deadline Supervision of the Supervised Entity or at least one the result of Logical Supervision of the Supervised Entity is incorrect), THEN the function WdgM_MainFunction shall change the Local Supervision Status to WDGM_LOCAL_STATUS_EXPIRED (see Transition (6) in [SWS_WdgM_91006]).⌋ [SWS_WdgM_00207] ⌈If the Supervised Entity was in Local Supervision Status WDGM_LOCAL_STATUS_OK and if a call of WdgM_SetMode switches to a mode which deactivates the Supervised Entity (see [SWS_WdgM_00283]), then the Watch-