uRTEDemo_03_Nucleo-F446RE_SystemStates_10_Model

Technical Function

Blinking LED

An LED shall blink to indicate that the system is alive and responding.

Warnings

Safety (1)

Safety Warnings for TechnicalFunction Blinking LED.
Safety warnings are related to the Requirements Layer, especially the SIL

Blinking LED has a SIL required of SIL_1 but a SIL achieved of QM. This is caused by the following referenced implementation units: PA5 (QM), ButtonRead (QM), drv_LED (QM), run_LED (QM), run_readButton (QM)

Diagrams

Relationships

Safety

Required
The highest SIL derived from SafetyRequirements.
SIL derived
SIL_1
This attribute allows to overwrite the derived SIL level. The result is the SIL effective attribute.
SIL manual
derived
The reason why the derived SIL is ignored and an explicit SIL is set.
reason
The SIL required for this implementation unit is defined by the derived SIL but can be overwritten by "SIL manual".
SIL required
SIL_1
Achieved
Calculated from referenced implementation units.
SIL achieved
QM
A justification why a certain SIL was achieved.
justification

Properties

Base
The name of this object. Certain classes of objects require this field to be unique. Please consider that this field might be used in code and thus must not contain special characters.
Name
Blinking LED
The type of this object within the uRTE model
Type
TechnicalFunction
A descriptive text for this object. Please consider that this field might be used in code and thus must not contain special characters.
Description

An LED shall blink to indicate that the system is alive and responding.

A user defined ID which can be freely chosen. Please consider that this field might be used in code and thus must not contain special characters.
User-ID
TechnicalFunction_25
Each object within the uRTE model has a unique ID, this is the ID for this object
UID
_1vn_oOTjEeyFGfWulEZp4Q
References

Software units (4)

Sofware units this technical function is associated with.

Unit Parent Function calls other Software Elements Technical Functions Requirements Type Tasks WCET Stack ROM Globals ProtectionSets SIL required SIL achieved sub Technical Functions (R) sub Requirements (R) Has a return value (R) SystemStates (R) Ingoing Trigger Ports (R) Outgoing Trigger Ports (R) Ingoing Data Ports (R) Outgoing Data Ports (R) Signals (D) Runnables (D) DataType (D) Is Synchronous (D) Hardware (D) Ports (G) Callers (F) Return Type (F) Parameters (F)

Reads the current button state from hardware

Button
InDriver 0 0 0
SIL_1 QM - - - - - - - - uRTE_boolean_t true - - - -

Hardware write-Interface towards the LED

LED
OutDriver 0 0 0
SIL_1 QM - - - - - - - - uRTE_boolean_t true - - - -

Controls the LED signal and thus the LED

LED
Runnable 0 0 0
SIL_1 QM false
  • Runnable_00_blink_Tick
  • Runnable_blink_Button_IN
  • Runnable_00_blink_OUT
- - - - - - - - -

Acquires the button state periodically and provides button signals

Button
Runnable 0 0 0
SIL_1 QM false
  • Runnable_run_readButton_Tick
  • Runnable_run_readButton_Edge_OUT
  • run_readButton_HW_IN
  • Runnable_run_readButton_Button_OUT
  • Runnable_run_readButton_button_pressed_cnt
- - - - - - - - -

Hardware Components (1)

Hardware Components this technical function is associated with.

Component Type Start End SIL required SIL achieved Sub-Components Technical Functions sub Technical Functions Requirements sub Requirements

LD2 [Green Led] on the Nucelo Board

Periphery GPIOA_BASE GPIOB_BASE - 1 SIL_1 QM

Functional Layer

Logical Function Blocks (3)

Logical Function Blocks which which are associated with this Technical Function.

Function Type Technical functions

An binary HMI

Input

The MCU implementing the logic

Service

An LED to indicate a binary state

Output

Requirement Layer

Hazard Scenarios (1)

Hazard Scenarios for associated Hazardous Events.

Hazard Scenario Parent Hazard Events

This would be very sad.

Hazardous Events (2)

Hazardous Events for associated Safety Goals.

Hazardous Event Parent Probability Controllability Effect SIL Safety-Goals

The user might think µRTE is hard to use.

QM

The customer might not see the full spectrum of features µRTE comes with.

QM

Safetygoals (1)

Safety Goals linking to the Requirements.

Safety Goal Parent Function Type SIL derived SIL manual SIL required Safe State Safety Requirements

An small demo model with the most important features shall show the most important features of µRTE.

System_Function QM derived QM Show slides

(Safety)Requirements (3)

(Safety)Requirements referencing to this technical function.

(Safety)Requirement Parent User-ID Author Creation Date Start Date Deadline Expense Responsibe Category Type Status Justification Function Type SIL derived SIL manual SIL required Tests Technical Functions Software Other SW Hardware Signals Global variables Activation events Use-Cases User-Stories Refining Conflicting refined by conflicted by

In order to indicate that uRTE is up and running, an LED shall blink (toggle its binary state) with an frequency of 1/100ms.

Requirement_32 Thomas Barth Tue Jun 07 13:05:57 CEST 2022 0.0 Thomas Barth product functional implemented - - - -

While the button is pressed, the LED shall be on permanently.

Requirement_93 Wed Jun 08 17:18:27 CEST 2022 0.0 product functional implemented - - - -

Runnables can be activated by cyclic events.

SafetyRequirement_95 Thomas Barth Wed Jun 08 17:34:15 CEST 2022 0.0 Thomas Barth product functional implemented System_Function QM SIL_1 SIL_1

Software Layer

Tasks (2)

Tasks in which software units are executed.

Task Core SIL Priority Software States Signals Init Hardware OutputSections Own TimeBase Stack

Task responsible for reading the button state

Arm® Cortex®-M4 SIL_1 6 - false .rtos.task.Button

Task responsible to let the LED blink

Arm® Cortex®-M4 SIL_1 4 - false .rtos.task.LED

Testing Layer

Tests (2)

Tests derived from referencing requirements.

Test User-ID Group Priority Status Procedure and Input-Data Expected Results gen Name gen Props SIL Requirements Technical-Functions Software-Units Signals Global variables Activation-Events Hardware-Components

The LED has to blink with a frequency of 1/100ms.

Test_132 0 implemented Regular power-on without user-input A blinking LED

Check if the LED is permanent on if there is user-input from the button

Test_133 0 implemented After a regular power-on, the button is pressed The LED shall be permanently on while the button is pressed