+Requirement Model
- +Blinking LED
- +UART
+Logical Function Model
- Controller
- LED
- PC
- Button
- Blinking LED
- UART
+Software Model
- +Software
  - +Button
    - ButtonRead
    - +run_readButton
      - press_cnt
  - +LED
    - drv_LED
    - run_LED
  - +UART
- +RTE
  - +Activation Engine
    - Button Timebase
    - LED timebase
  - +Signal Layer
    - HWI LED
    - HWI_Button
    - button state
    - button_edge
    - button_cnt
    - HWO_UART
    - +Signal-Pools
      - Button
  - +System States
    - Blink
    - UART
    - +State-Handler
- +RTOS
  - Button
  - LED
  - UART
- +Linkage
  - +Output-Sections
  - +Protection-Sets
    - BaseProtection
    - UART
- +DataTypes
+Hardware Model
- +Nucelo-F446RE
  - +STM32F446RE
    - Arm® Cortex®-M4
    - main
    - +GPIO
      - PA5
      - PC13-TAMPER-RTC
    - USART
  - Button
  - LED
+Testing Model
- +Item Tests
  - (Test_128) Smoke-Test
- +Functional Tests
  - +Blinking LED
    - (Test_132) Regular blink
    - (Test_133) LED permanent ON
  - +UART
    - (Test_134) UART functional/system test

Logical Function Block

Button

An binary HMI

Diagrams

Relationships

Requirements Model

Logical Function Model

Software Model

Hardware Model

Safety

Required
The SIL for this logical function is derived from the Safety Requirements linking to its technical functions. SIL	SIL_1
There are multiple SILs for this logical function. mixed SILs	QM, SIL_1

Properties

Base

Name

Button

Type

LogicalFunctionBlock

Description

An binary HMI

User-ID

LogicalFunctionBlock_89

UID

_5lJtQOc0EeyMHMAOoLxcsQ

Stereotype

Type

Input

References

Technical Functions (2)

System functionalities (technical functions) this logical function block is associated with.

Function	LFB	Software	Hardware	Other Software	SIL required	SIL achieved	SIL justification	sub Technical Functions	Requirements	sub Requirements
Blinking LED An LED shall blink to indicate that the system is alive and responding.	Button Controller LED	run_LED drv_LED run_readButton ButtonRead	PA5		SIL_1	QM		Blinking LED UART	Requirement_32 - LED Blink Requirement_93 - LED Button SafetyRequirement_95 - Runnable activation by cyclic events Requirement_95 - UART	Requirement_32 - LED Blink Requirement_93 - LED Button SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_94 - Global variables Requirement_95 - UART
UART If the button is pressed, UART messages indicating the press duration are sent.	Button Controller PC	run_UART_send UART out run_UART_wakeUp run_readButton ButtonRead	USART		SIL_1	QM		Blinking LED UART	Requirement_95 - UART SafetyRequirement_93 - Runnable activation by signal events Requirement_95 - UART SafetyRequirement_94 - Global variables Requirement_95 - UART SafetyRequirement_95 - Runnable activation by cyclic events Requirement_95 - UART	Requirement_95 - UART SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_115 - Protection Sets Requirement_95 - UART SafetyRequirement_94 - Global variables Requirement_95 - UART SafetyRequirement_98 - Multiple System-States Requirement_95 - UART

Ports

Port	Flow
Button_OUT (LogicalFunctionPort_91)	Button state (LogicalFunctionFlow_90)

Functional Layer

Logical Function Blocks (3)

Logical Function Blocks which which are associated with the Technical Functions.

Function	Type	Technical functions
Controller The MCU implementing the logic	Service	Blinking LED UART
LED An LED to indicate a binary state	Output	Blinking LED
PC A PC receiving UART messages	Monitor	UART

Requirement Layer

Hazard Scenarios (1)

Hazard Scenarios for associated Hazardous Events.

Hazard Scenario	Parent	Hazard Events
Potential customers don't like the tool This would be very sad.	UART	Complexity Unknown features

Hazardous Events (2)

Hazardous Events for associated Safety Goals.

Hazardous Event	Parent	Probability	Controllability	Effect	SIL	Safety-Goals
Complexity The user might think µRTE is hard to use.	UART				QM	Show most important features in an lightweight demo
Unknown features The customer might not see the full spectrum of features µRTE comes with.	UART				QM	Show most important features in an lightweight demo

Safetygoals (1)

Safety Goals linking to the Requirements.

Safety Goal	Parent	Function Type	SIL derived	SIL manual	SIL required	Safe State	Safety Requirements
Show most important features in an lightweight demo An small demo model with the most important features shall show the most important features of µRTE.	UART	System_Function	QM	derived	QM	Show slides	SafetyRequirement_94 - Global variables Requirement_95 - UART SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_96 - Inter-task communication SafetyRequirement_97 - local and global signals Requirement_95 - UART SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_98 - Multiple System-States Requirement_95 - UART SafetyRequirement_115 - Protection Sets Requirement_95 - UART SafetyRequirement_95 - Runnable activation by cyclic events Requirement_95 - UART SafetyRequirement_93 - Runnable activation by signal events Requirement_95 - UART

(Safety)Requirements (6)

(Safety)Requirements linking to the Technical Functions.

(Safety)Requirement	Parent	User-ID	Author	Creation Date	Responsibe	Category	Type	Status	Function Type	SIL derived	SIL manual	SIL required	Tests	Technical Functions	Software	Signals	Global variables	Activation events	Refining	refined by
SafetyRequirement_94 - Global variables Global variables can store data for Runnables and other Software Functions. The memory protection will automatically be generated. The actual declaration is implemented as user-code to allow the use of non-trivial datatypes and operations.	UART	SafetyRequirement_94	Thomas Barth	Wed Jun 08 17:34:15 CEST 2022	Thomas Barth	product	functional	implemented	System_Function	QM	derived	QM		UART	run_readButton		press_cnt		Requirement_95 - UART
Requirement_32 - LED Blink In order to indicate that uRTE is up and running, an LED shall blink (toggle its binary state) with an frequency of 1/100ms.	Blinking LED	Requirement_32	Thomas Barth	Tue Jun 07 13:05:57 CEST 2022	Thomas Barth	product	functional	implemented	-	-	-	-	(Test_132) Regular blink	Blinking LED	run_LED			LED timebase		Requirement_94 - LED Requirement_32 - LED Blink Requirement_93 - LED Button
Requirement_93 - LED Button While the button is pressed, the LED shall be on permanently.	Blinking LED	Requirement_93		Wed Jun 08 17:18:27 CEST 2022		product	functional	implemented	-	-	-	-	(Test_133) LED permanent ON	Blinking LED	run_LED					Requirement_94 - LED Requirement_32 - LED Blink Requirement_93 - LED Button
SafetyRequirement_95 - Runnable activation by cyclic events Runnables can be activated by cyclic events.	UART	SafetyRequirement_95	Thomas Barth	Wed Jun 08 17:34:15 CEST 2022	Thomas Barth	product	functional	implemented	System_Function	QM	SIL_1	SIL_1		Blinking LED UART		button state		Button Timebase	Requirement_95 - UART
SafetyRequirement_93 - Runnable activation by signal events Runnables can be activated by signal (onData/onError) events.	UART	SafetyRequirement_93	Thomas Barth	Wed Jun 08 17:34:15 CEST 2022	Thomas Barth	product	functional	implemented	System_Function	QM	derived	QM		UART		button state			Requirement_95 - UART
Requirement_95 - UART When the button is pressed, the system-state shall change from Blink into UART mode. The start of UART mode shall be signaled via UART. As long as the button is pressed, UART strings with the time in seconds the Button was pressed shall be send with the frequency with which the button pressed signal is updated.	UART	Requirement_95	Thomas Barth	Wed Jun 08 17:56:19 CEST 2022	Thomas Barth	product	functional	implemented	-	-	-	-	(Test_134) UART functional/system test	UART	run_UART_send run_UART_wakeUp					SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_115 - Protection Sets Requirement_95 - UART SafetyRequirement_93 - Runnable activation by signal events Requirement_95 - UART SafetyRequirement_94 - Global variables Requirement_95 - UART SafetyRequirement_95 - Runnable activation by cyclic events Requirement_95 - UART SafetyRequirement_97 - local and global signals Requirement_95 - UART SafetyRequirement_98 - Multiple System-States Requirement_95 - UART

Software Layer

Software units (7)

Sofware units the associated technical functions are associated with. See associated tasks for more software dependencies.

Unit	Parent	Technical Functions	Requirements	Type	Tasks	Globals	ProtectionSets	SIL required	SIL achieved	sub Technical Functions (R)	sub Requirements (R)	Has a return value (R)	SystemStates (R)	Ingoing Trigger Ports (R)	Outgoing Trigger Ports (R)	Ingoing Data Ports (R)	Outgoing Data Ports (R)	Signals (D)	Runnables (D)	DataType (D)	Is Synchronous (D)	Hardware (D)	Ports (G)	Callers (F)	Return Type (F)	Parameters (F)
ButtonRead Reads the current button state from hardware	Button	Blinking LED UART	SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART	InDriver	Button			SIL_1	QM	-	-	-	-	-	-	-	-	HWI_Button	run_readButton	uRTE_boolean_t	true	PC13-TAMPER-RTC	-	-	-	-
UART out writes Data to the UART module. No DataType is chosen, so that a typedef file will be generated.	UART	UART		OutDriver	UART			SIL_1	QM	-	-	-	-	-	-	-	-	HWO_UART	run_UART_send	None	true	USART	-	-	-	-
drv_LED Hardware write-Interface towards the LED	LED	Blinking LED	SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART	OutDriver	LED			SIL_1	QM	-	-	-	-	-	-	-	-	HWI LED	run_LED	uRTE_boolean_t	true	PA5	-	-	-	-
run_LED Controls the LED signal and thus the LED	LED	Blinking LED	Requirement_32 - LED Blink Requirement_93 - LED Button	Runnable	LED			SIL_1	QM	Blinking LED	SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART	false	Blink UART	Runnable_00_blink_Tick		Runnable_blink_Button_IN	Runnable_00_blink_OUT	-	-	-	-	-	-	-	-	-
run_UART_send Sends UART messages periodically via the UART signal	UART	UART	Requirement_95 - UART SafetyRequirement_111 - SignalLayer features Requirement_95 - UART SafetyRequirement_98 - Multiple System-States Requirement_95 - UART	Runnable	UART			SIL_1	QM	UART		true	UART	Runnable_run_UART_send_TPortIN_1		Runnable_run_UART_send_DPortIN_1 Runnable_run_UART_send_DPortIN_2	Runnable_run_UART_send_UART_OUT	-	-	-	-	-	-	-	-	-
run_UART_wakeUp Runnable to switch into the UART state if there is an event in the Blink State. This runnable does not use hardware signals but accesses hardware directly and is therefore associated with an protection set grandting access to hardware.	UART	UART	Requirement_95 - UART SafetyRequirement_115 - Protection Sets Requirement_95 - UART SafetyRequirement_98 - Multiple System-States Requirement_95 - UART	Runnable	UART		UART	SIL_1	QM			true	Blink	Runnable_run_UART_WakeUP				-	-	-	-	-	-	-	-	-
run_readButton Acquires the button state periodically and provides button signals	Button	Blinking LED UART	SafetyRequirement_94 - Global variables Requirement_95 - UART	Runnable	Button	press_cnt		SIL_1	QM	Blinking LED UART	SafetyRequirement_110 - Hardware Interfacing SafetyRequirement_111 - SignalLayer features Requirement_95 - UART	false	Blink UART	Runnable_run_readButton_Tick	Runnable_run_readButton_Edge_OUT	run_readButton_HW_IN	Runnable_run_readButton_Button_OUT Runnable_run_readButton_button_pressed_cnt	-	-	-	-	-	-	-	-	-

Hardware Layer

Hardware Components (2)

Hardware Components the associated technical functions are associated with. See associated tasks for more hardware dependencies.

Component	Type	Start	End	SIL required	SIL achieved	Sub-Components	Technical Functions	sub Technical Functions	Requirements	sub Requirements
PA5 LD2 [Green Led] on the Nucelo Board	Periphery	GPIOA_BASE	GPIOB_BASE - 1	SIL_1	QM		Blinking LED
USART UART module connected to pin TX/RX PA2/PA3 at 115200 8N1	Periphery	USART2_BASE	USART3_BASE - 1	SIL_1	QM		UART