Electronic Brake Boost Control Module --, 2021 MY

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Active Hydraulic Accumulator
Electric Motor	C0586	This monitoring checks if the electric motor drive current is in range.	supply current	> 76.3 [A]	No secondary parameter	= True	0.015 [s]	continuous	N-Trip	feasible	external signal modification box
	C058E	This monitoring checks if the AHA actuator position is out of range.	(piston position	< -0.57 [mm]	AHA State	= Running OR Shutdown	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
			OR		AND
			piston position)	> 12.62 [mm]	vehicle speed*)	> 0 [mph]
			AND
			electric motor speed)	> 1000 [rpm]
		This monitoring checks if the electric motor of AHA is locked.	electric motor speed in piston forward direction	< 100 [rpm]	AHA State	= Running OR Shutdown	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
					AND
					vehicle speed*)	> 0 [mph]
					AND
					speed controller of electric motor control	= maximum control limit
			electric motor speed in piston backward direction	< 100 [rpm]	AHA State	= Running OR Shutdown	0.200 [s]
					AND
					vehicle speed*)	> 0 [mph]
					AND
					brake pedal*)	= released
					AND
					speed controller of electric motor control	= maximum control limit
	C0592	This monitoring checks if the current at the shunt resistor is out of range high.	nominal offset current	> 8.5 [A]	electric motor	= not controlled	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	C0592	This monitoring checks if the current at shunt is out of range high.	current offset measurement	> 87.8 [A]	electric motor	= not controlled	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	C0593	This monitoring checks if the current at the shunt resistor is out of range low.	nominal offset current	< -8.5 [A]	electric motor	= not controlled	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	C0593	This monitoring checks if the current at the ground line out of range low.	current offset measurement	< -54.7 [A]	electric motor	= controlled	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	C05AD	This monitoring checks if the piston zero position cannot be reached during AHA reference run because of blocking.	electric motor speed	< 100 [rpm]	AHA State	= Init	0.200 [s]	once	N-Trip	feasible	external signal modification box
					AND
					vehicle speed*)	> 3.33 [mph]
					AND
					brake pedal*)	= released
					AND
					speed controller of electric motor control	= maximum control limit
		This monitoring checks if there is an electric motor fault while moving forward during the motor reference run.	number of electric motor forward rotations	< 1.5	AHA State	= Init	0.200 [s]	once	N-Trip	feasible	external signal modification box
					AND
					vehicle speed*)	> 3.33 [mph]
					AND
					brake pedal*)	= released
					AND
					speed controller of electric motor control	= maximum control limit
		This monitoring checks if the stop position of the piston is detected.	number of electric motor backwards rotations	> 30	AHA State	= Init	0.200 [s]	once	N-Trip	feasible	external signal modification box
					AND
					vehicle speed*)	> 3.33 [mph]
					AND
					brake pedal*)	= released
		This monitoring checks if there was an invalid stop position of piston found during AHA reference run	number of electric motor backwards rotations	> 0.25	AHA State	= Init	0.200 [s]	once	N-Trip	feasible	external signal modification box
					AND
					vehicle speed*)	> 3.33 [mph]
					AND
					brake pedal*)	= released
	C1258	This monitoring checks if the RPS2 auto- calibration was performed properly.	auto-calibration of RPS2	= failed	AHA State	= Init	0.200 [s]	once	N-Trip	feasible	external signal modification box
					AND
					vehicle speed*)	> 3.33 [mph]
					AND
					brake pedal*)	= released
Electronic Control Unit	C0535	This monitoring checks if there is too low power supplied to the AHA during AHA actuation is requested.	(Voltage Sensor 4 when electric motor is activated	< 8.63 [V]	electric motor	= controlled	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
			OR
			Voltage Sensor 4 during actuation)	< 9.3 [V]
			AND
			In a defined interval)	= 0.5 [s]
		This monitoring checks if there is toggling between normal voltage and under voltage during AHA actuation is active.	Voltage Sensor 4	< 8.63 [V]	electric motor	= controlled	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
			AND
			For a defined number of times	>= 5
			AND
			In a defined interval	= 0.5 [s]
		This monitoring checks if there is too low power supplied to AHA.	(Voltage Sensor 4	< 8.3 [V]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
			AND
			In a defined interval)	= 0.6 [s]
			OR
			(Voltage Sensor 4	< 7.37 [V]
			AND
			In a defined interval)	= 0.03 [s]
	C058E	This monitoring checks if the RPS2 calibration data is correct.	calculated RPS2 checksum	<> stored RPS2 checksum	AHA State	= Init	0.200 [s]	once	N-Trip	feasible	external signal modification box
		This monitoring checks if the stored actuator calibration data is correct.	calculated RPS2 checksum	<> stored RPS2 checksum	AHA State	= Init	0.200 [s]	once	N-Trip	feasible	external signal modification box
		This monitoring checks if the production line calibration of the electric motor of AHA was done successfully.	expected motor position - measured motor position	> 5 [°]	AHA State	= Init	0.200 [s]	once at end of production line	N-Trip	feasible	external signal modification box
					AND
					Equals	0 [rpm]
	C11A9	This monitoring checks if there is too high power supplied to AHA.	(Voltage Sensor 4	> 18.1 [V]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
			AND
			In a defined interval)	= 0.6 [s]
			AND
			(Voltage Sensor 4	> 19.6 [V]
			AND
			In a defined interval)	= 0.03 [s]
	C1258	This monitoring checks the proper functionality of electric motor driver.	driver circuit temperature	> 170 [°C]	No secondary parameter	= True	0.200 [s]	continuous	1-Trip	feasible	external signal modification box
			OR
			driver circuit supply voltage	< 6.3 [V]
			OR
			driver circuit supply voltage	> 28.8 [V]
			OR
			short circuit to ground flag	= True
			OR
			short circuit to system voltage flag	= True
		This monitoring checks for correct RAM functionality.	read pattern	<> written pattern	AHA State	= dummy	0.200 [s]	once	N-Trip	not feasible - waiver requested
		This monitoring checks the correct CRC of Flash EEPROM.	calculated EEPROM checksum	<> stored EEPROM checksum	AHA ECU running time after wake up	= 71 [s]	71 [s]	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks for proper functionality of the AHA ECU system clock.	switching to the system clock is unsuccessful	= True	AHA State	= Init	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
			system clock switches to the internal clock	= True	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks the correct ADC conversion time.	ADC conversion time	> 0.020 [°C]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks the CRC checksum of the stored calibrated voltage value for RPS2.	Calculated checksum	<> stored checksum	AHA State	= Init	0.200 [s]	once	N-Trip	feasible	external signal modification box
Rotor Position Sensor 2	C058E	This monitoring checks the rationality high of the RPS2 using the angle gradient.	difference between the current angle and the previous angle	> 0.84 [rad]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks the rationality low of the RPS2 using the angle gradient.	difference between the current angle and the previous angle	< -0.84 [rad]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks the CRC of RPS2 communication.	Calculated checksum	<> received checksum	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks for correct RPS2 configuration.	number of failed RPS2 configuration runs	>= 3	AHA State	= Init	0.200 [s]	once	N-Trip	feasible	external signal modification box
		This monitoring checks if the sine or cosine	sine component of RPS2 vector	> 23230	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Active Hydraulic Accumulator
		component of RPS2 vector is out of range high.	OR	> 23230							box
		component of RPS2 vector is out of range high.	cosine component of RPS2 vector	> 23230							box
		This monitoring checks if the sine or cosine component of RPS2 vector is out of range low.	sine component of RPS2 vector	< 5632	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
			OR
			cosine component of RPS2 vector	< 5632
		This monitoring checks if there was an unexpected reset at RPS2.	reset-flag of RPS1 safety word	= True	No secondary parameter	= True	0.200 [s]	once	N-Trip	feasible	external signal modification box
		This monitoring checks if there is a RPS2 time out.	no messages are received	= True	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there was a RPS2 communication fault.	RPS2 safety word indicates an error	= True	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if all RPS2 data are periodically updated.	update-flag of RPS2 safety word	= NOT_UPDATED	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
			OR
			update-flag of RPS2 safety word	= INIT
	C118A	This monitoring checks if the RPS2 supply voltage is in range.	voltage-flag of RPS2 safety word	= True	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
Temperature Sensor 3	C05B3	This monitoring checks if there is a circuit low at Temperature Sensor 3.	Temperature Sensor 3	< -54 [°C]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	C05B4	This monitoring checks if there is a circuit high at Temperature Sensor 3.	Temperature Sensor 3	> 210 [°C]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	C05B6	This monitoring checks the temperature gradient of Temperature Sensor 3	\| Temperature Sensor 3 gradient \|	> 8 [K/s]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if Temperature Sensor 3 is out of range high.	Temperature Sensor 3	> 155 [°C]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if Temperature Sensor 3 is out of range low.	Temperature Sensor 3	< -45 [°C]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	C1258	This monitoring checks the rationality of Temperature Sensor 3 by crosschecking it against the EBBC temperature.	I Temperature Sensor 3 - EBBC temperature I	> 28 [°C]	AHA State	= Running	0.200 [s]	once	N-Trip	feasible	external signal modification box
					AND
					Vehicle shutdown time provided by ECM	= valid
					AND
					time between key off and key on	> 6 [h]
Voltage Sensor 4	C1258	This monitoring checks the voltage sensor rationality by crosscheck of Voltage Sensor 4 and Voltage Sensor 5.	Voltage Sensor 4 - Voltage Sensor 5	> 2.6 [V]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
			OR
			Voltage Sensor 4 - Voltage Sensor 5	< -2.3 [V]
	U3508	This monitoring checks if Voltage Sensor 4 is out of range high.	Voltage Sensor 4	> 18.1 [V]	vehicle speed*)	> 0 [mph]	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	U3508	This monitoring checks if Voltage Sensor 4 is out of range low.	Voltage Sensor 4	< 8 [V]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	U3509	This monitoring checks if there is a Voltage Sensor 4 circuit low or open circuit fault.	Voltage Sensor 4	< 0.08 [V]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	U350A	This monitoring checks if there is a Voltage Sensor 4 circuit high fault.	Voltage Sensor 4	> 28.05 [V]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
Voltage Sensor 5	C1258	This monitoring checks if Voltage Sensor 5 is out of range high.	Voltage Sensor 5	> 15.1 [V]	vehicle speed*)	> 0 [mph]	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if Voltage Sensor 5 is out of range low.	Voltage Sensor 5	< 4.0 [V]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is a Voltage Sensor 5 circuit low or open circuit fault.	Voltage Sensor 5	< 0.046 [V]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is a Voltage Sensor 5 circuit high fault.	Voltage Sensor 5	> 15.6 [V]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
Electronic Brake Boost Control Module
Booster Master Switch	C0595	This monitoring checks if the Booster Master Switch (BMS) can be switched ON and OFF because of active Reverse Voltage Protection (aRVP) FET failure.	BMS and/or the aRVP could not be switched ON or OFF because of Field Effect Transistor failure	= True	EBBC State	= Running	0.015 [s]	once	N-Trip	not feasible - waiver requested
Booster Master Switch	C0595	This monitoring checks if the Booster Master Switch (BMS) can be switched ON and OFF because of DC link capacitor failure.	BMS and/or the aRVP could not be switched ON or OFF because of DC link capacitor failure	= True	EBBC State	= Running	60 [s]	once	N-Trip	not feasible - waiver requested
Brake Pedal Travel Sensor A	P057B	This monitoring checks if there is a BPTS A gradient error.	\|BPTS A gradient	> 2000 [mm/s]	No secondary parameter	= True	immediately	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks if BPTS A is out of range high.	BPTS A	> 47 [mm]	No secondary parameter	= True	0.04 [s]	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks if BPTS A is out of range low.	BPTS A	< -0.5 [mm]	No secondary parameter	= True	0.04 [s]	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks if there is a BPTS A communication fault.	BPTS A PWM frequency	< 879.3 [1/s]	EBBC State	= Running OR Shutdown	0.100 [s]	continuous	N-Trip	not feasible - waiver requested
			OR
			BPTS A PWM frequency	> 1127.17 [1/s]
			BPTS A PWM duty cycle	< 7.32 [%]	EBBC State	= Running OR Shutdown	0.100 [s]
			OR
			BPTS A PWM duty cycle	> 92.83 [%]
	P057C	This monitoring checks if there is a circuit low or a short circuit to ground at BPTS A.	BPTS A signal line	< 0.3 [V]	EBBC State	= Running OR Shutdown	0.03 [s]	continuous	N-Trip	feasible	break out box
			AND
			rising or falling edge of BPTS A PWM	= not detected
	P057D	This monitoring checks if there is a circuit high at BPTS A.	BPTS A signal line	> 4.7 [V]	EBBC State	= Running OR Shutdown	0.03 [s]	continuous	N-Trip	feasible	break out box
	P057D		AND	> 4.7 [V]	EBBC State	= Running OR Shutdown	0.03 [s]	continuous	N-Trip	feasible	break out box

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Active Hydraulic Accumulator
			rising or falling edge of BPTS A PWM	= not detected
Brake Pedal Travel Sensor B	P05DC	This monitoring checks if there is a BPTS B gradient error	\|BPTS B gradient\|	> 2000 [mm/s]	No secondary parameter	= True	immediately	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks if BPTS B is out of range high.	BPTS B	> 47 [mm]	No secondary parameter	= True	0.040 [s]	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks if BPTS B is out of range low.	BPTS B	< -0.5 [mm]	No secondary parameter	= True	0.040 [s]	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks if there is a BPTS B communication fault.	BPTS A PWM frequency	< 879.3 [1/s]	EBBC State	= Running OR Shutdown	0.100 [s]	continuous	N-Trip	not feasible - waiver requested
			OR
			BPTS A PWM frequency	> 1127.17 [1/s]
			BPTS A PWM duty cycle	< 7.32 [%]	EBBC State	= Running OR Shutdown	0.100 [s]
			OR
			BPTS A PWM duty cycle	> 92.83 [%]
	P05DD	This monitoring checks if there is a circuit low at BPTS B.	rising edge or falling edge of BPTS B PWM	= not detected	EBBC State	= Running OR Shutdown	0.030 [s]	continuous	N-Trip	feasible	break out box
			AND
			BPTS B signal line	< 0.3 [V]
	P05DE	This monitoring checks if there is a circuit high or open circuit at BPTS B.	rising or falling edge of BPTS B PWM	= not detected	EBBC State	= Running OR Shutdown	0.030 [s]	continuous	N-Trip	feasible	break out box
			AND
			BPTS B signal line	> 4.7 [V]
	P05E0	This monitoring checks the BPTS A and BPTS B rationality by crosscheck.	\|BPTS A - BPTS B\|	> 1 [mm]	BPTS A	> 38 [mm]	immediately	continuous	1-Trip	not feasible - waiver requested
					AND
					BPTS B	> 38 [mm]
					AND
					electric motor	equals controlled
			\|BPTS A - BPTS B\|	> 0.5 [mm]	BPTS A	<= 38 [mm]	immediately
					AND
					BPTS B	<= 38 [mm]
					AND
					electric motor	equals controlled
		This monitoring checks if zero position of brake pedal is in range.	(BPTS A + BPTS B) / 2	> 0.6 [mm]	EBBC State	= Running OR Shutdown	0.500 [s]	continuous	N-Trip	not feasible - waiver requested
			AND		AND
			(BPTS A + BPTS B) / 2	< 1.5 [mm]	vehicle speed*)	> 4.5 [mph]
					AND
					brake pedal*)	= not applied
EBBC System	C0042	This monitoring checks if the BPTS supply under voltage.	BPTS supply voltage	< 4.68 [V]	EBBC State	= Running OR Shutdown	0.060 [s]	continuous	N-Trip	feasible	break out box
			OR
			Voltage Sensor 3	< 5.6 [V]
	C0535	This monitoring checks if there is system under voltage detected.	(Electric Motor Driver Monitoring detects failure	= True	EBBC State	= Running	0.020 [s]	continuous	N-Trip	feasible	external signal modification box AND break out box
			OR
			Actuation Time Out due to Under voltage Monitoring detects failure	= True
			OR
			AHA Input Voltage Toggling Monitoring detects failure	= True
			OR
			Voltage Sensor 4 circuit low Monitoring detects failure	= True
			OR
			AHA Under voltage during actuation Monitoring detects failure)	= True
			AND
			EBBC Logic Volate Sensor (Voltage Sensor 3))	< 9.4 [V]
			AND
			EBBC Power Voltage Sensor1 (Voltage Sensor 1))	< 9.4 [V]
	C058A	This monitoring checks if the differential stroke is in range.	differential stroke	< -5.0 [mm]	EBBC State	= Running OR Shutdown	0.040 [s]	continuous	N-Trip	not feasible - waiver requested
	C123C	This monitoring checks if the brake boost function of EBBC is deactivated during repair service.	brake boost function	= deactivated	EBBC State	= Diag	0.020 [s]	continuous	1-Trip	feasible	software control strategy
	P057B	This monitoring checks if the BPTS supply voltage is in range.	BPTS supply voltage	< 4.68 [V]	EBBC State	= Running OR Shutdown	0.060 [s]	continuous	N-Trip	feasible	break out box
			OR
			BPTS supply voltage	> 5.32 [V]
	P05FF	This monitoring checks if there is a creeping leakage is hydraulics.	brake pedal position*)	> 25 - 33 [mm] range	EBBC State	= Running OR Shutdown	0.100 [s]	continuous	N-Trip	feasible	external signal modification box
			OR		AND
			brake pedal position*)	< 25 - 33 [mm] range	master cylinder brake pressure	= in rage of 1000-5000 [kPa]
	P0607	This monitoring checks if the calibrated idle position can be reached.	measured idle position <> stored idle position	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if all written BPTS calibration values can be read.	read failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible -waiver
		This monitoring checks if the OES calibration routine was aborted.	calibration routine aborted	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver
		This monitoring checks if the PreDrive Check was successful.	PreDrive Check fault	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
	P060A	This monitoring checks if the Voltage Sensor 2 is much higher than Voltage Sensor 3.	Voltage Sensor 2 - Voltage Sensor 3	> 7 [V]	EBBC State	= Running OR Shutdown	immediately	continuous	N-Trip	not feasible - waiver requested
	P062F	This monitoring checks if measured value for electric motor idle position can be written.	write failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if measured value for electric motor backward bound position can be written.	write failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if the measured value of plunger release position can be written.	write failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if the BPTS hysteresis values can be written.	write failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if BPTS calibration values can be written.	write failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible -waiver
		This monitoring checks if the correction values of the characteristic curve of BPTS1 can be written.	write failure occurred	= True	EBBC State	= Init	0.100 [s]	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if the BPTS1 offset based on mounting position can be written.	write failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if the correction values of the characteristic curve of BPTS2 can be written.	write failure occurred	= True	EBBC State	= Init	0.100 [s]	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if the BPTS2 offset based on mounting position can be written.	write failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if the RPS1 X-value offset can be written.	write failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if the RPS1 Y-value offset can be written.	write failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
		This monitoring checks if the synchronicity value of RPS1 can be written.	write failure occurred	= True	EBBC State	= Init	immediately	once at end of production line	N-Trip	not feasible - waiver requested
	U0300	This monitoring checks if the EBBC software and the AHA software correspond.	EBBC software version and AHA software version	= do not match	EBBC State	= Running OR Shutdown	5 [s]	continuous	N-Trip	feasible	external signal modification box
	U031C	This monitoring checks if the hardware components are supported by the software.	device ID of ASIC is not in the list of supported device Ids	= True	EBBC State	= Init	0.600 [s]	once	N-Trip	not feasible - waiver requested
			OR
			software version ID of ASIC is not in the list of supported software version IDs	= True
			OR

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Active Hydraulic Accumulator
			microcontroller device ID is not in the list of supported device IDs	= True
			OR
			microcontroller software version ID is not in the list of supported SW-	= True
	U034B	This monitoring checks the compatibility between the AHA hardware and AHA software.	AHA software version and AHA hardware version	= do not match	EBBC State	= Init	0.200 [s]	once	N-Trip	not feasible - waiver requested
Electric Motor	C057F	This monitoring checks if MOS-FETs of electric motor driver can be controlled and actuate properly.	Phase W voltage / Voltage Sensor 2	>= 46.3 [%]	EBBC State	= Running OR Shutdown	4 [s]	continuous	N-Trip	not feasible - waiver requested
					AND
					electric motor low-side transistor	= not controlled switched on
			Phase W voltage / Voltage Sensor 2	<= 48.3 [%]	EBBC State	= Running OR Shutdown	4 [s]
					AND
					electric motor low-side transistor	= not controlled switched on
	C058A	This monitoring checks if movement of electric motor is in proper direction.	toggling counter	> 7	EBBC State	= Running OR Shutdown	0.150 [s]	continuous	N-Trip	not feasible - waiver requested
					AND
					\|actual electric motor speed -target electric motor speed\|	> 25
		This monitoring checks the rationality of the measured electric motor backward stop position.	measured electric motor backward stop position - stored electric motor backward stop position	< -60 [°]	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
		This monitoring checks the oscillation of EBBC motor.	Oscillation of the EBBC motor is detected	= True	EBBC State	= Running OR Shutdown	0.150 [s]	continuous	N-Trip	not feasible - waiver requested
			AND		AND
			for a defined time	> 0.3 [s]	Pre-drive check is finished	= True
					AND
					amplification	= True
					AND
					brake pedal	= applied
		This monitoring checks if there is an unintended backward rotation of the EBBC electric motor.	target electric motor speed - \|actual electric motor speed\|	> 40 [rad/s]	EBBC State	= Running OR Shutdown	0.015 [s]	continuous	N-Trip	not feasible - waiver requested
					AND
					target electric motor speed	> 0 [rpm]
					AND
					actual electric motor speed	<= 0 [rpm]
	C0590	This monitoring checks if the leakage current at the motor is too high.	Current Sensor	> 20 [A]	EBBC State	= Running OR Shutdown	1 [s]	continuous	N-Trip	not feasible - waiver requested
					AND
					electric motor	= controlled
	C0591	This monitoring checks if the negative leakage current at the motor is too high.	Current Sensor	< -20 [A]	EBBC State	= Running OR Shutdown	1 [s]	continuous	N-Trip	not feasible - waiver requested
					AND
					electric motor	= controlled
	C0595	This monitoring checks if two or more transistors of the B6-bridge are short-circuited.	Current Sensor	> 150 [A]	EBBC State	= Running OR Shutdown		continuous	N-Trip	not feasible - waiver requested
					AND
					electric motor	= not controlled
	U3012	This monitoring checks for proper EBBC actuator functionality.	(\|electric motor speed \|	> 20 [rad/s]	EBBC State	= Init	3 [s]	once	N-Trip	not feasible - waiver requested
			AND
			electric motor moving direction)	= opposite than controlled
			OR
			backward bound position)	= not reached
			idle position	= not reached	EBBC State	= Init	2 [s]
Electronic Control Unit	B2012	This monitoring checks if vehicle OBD configuration programmed Engine ECU match with OBD Configuration programmed in EBBC ECU.	Engine ECU configured as non-OBD vehicle and EBBC ECU configured as US OBD vehicle	= True	EBBC state	= Running	0.020 [s]	continuous	1-Trip	feasible	external signal modification box
		This monitoring checks if there is a mismatch between the engine ECU and the EBBC ECU configuration.	Engine ECU configured as US OBD vehicle and EBBC ECU configured as non-OBD vehicle	= True	EBBC state	= Running	0.020 [s]	continuous	1-Trip	feasible	external signal modification box
		This monitoring checks if the EBBC dataset version that was programmed in the ECU is compatible with the programmed software version.	Not compatible version of EBBC dataset in the system	= True	EBBC State	= Init	immediately	once	N-Trip	feasible	software control strategy
	C0595	This monitoring checks the functionality of the over current detection circuit by switching the comparator off and on.	feedback pin level	= logical high	EBBC State	= Init	0.030 [s]	once	N-Trip	not feasible - waiver requested
					AND
					BMS control*)	= switched off
					AND
					PWM ratio	= maximum
			feedback pin level	= logical low	EBBC State	= Init	0.030 [s]
					AND
					BMS control*)	= switched off
					AND
					PWM ratio	= minimum
		This monitoring checks for over current at electric motor driver.	feedback pin level	= logical high	No secondary parameter	= True	0.030 [s]	continuous	N-Trip	not feasible - waiver
	C0599	This monitoring checks if an EBBC dataset is present in the ECU (Electronic Control Unit) or if no EBBC dataset was programmed yet.	EBBC dataset is empty	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver requested
	P0602	This monitoring checks if there was any jitter in task execution.	Current start time of a task	> ideal start time + 5 %	No secondary parameter	= True	immediately	continuous	N-Trip	not feasible - waiver
		This monitoring checks for exceptions in Operating System.	Software program execution failure detected	= True	EBBC State	= Running OR Shutdown	0.120 [s]	continuous	1-Trip	not feasible -waiver
		This monitoring checks if the customer ID is correct.	Stored customer ID	<> expected customer ID	EBBC State	= Init	0.100 [s]	once	1-Trip	not feasible -waiver
		This monitoring checks if the PSW end marker is valid.	PSW end marker has not been found	= True	EBBC State	= Init	0.100 [s]	once	1-Trip	not feasible - waiver
		This monitoring checks if there is enough available space in the EEPROM to allocate a PDM data field.	PDM data field size to allocate	> available space in EEPROM	No secondary parameter	= True	0.100 [s]	continuous	1-Trip	not feasible - waiver requested
		This monitoring checks if the stored data field size in EEPROM is correct.	EEPROM data field size stored	<> data field size configuration in software	EBBC State	= Init	0.100 [s]	once	1-Trip	not feasible - waiver requested
		This monitoring checks if the microcontroller stack is not changed by other tasks.	check-word at begin of stack	= has changed	EBBC State	= Running OR Shutdown	0.080 [s]	continuous	1-Trip	not feasible -waiver
			OR
			check-word at end of stack	= has changed
		This monitoring checks if an interrupt fault has occurred.	not supported software interrupt occurred	= True	No secondary parameter	= True	0.020 [s]	continuous	N-Trip	not feasible - waiver requested
			OR
			non implemented interrupt occurred	= True
			OR
			Interrupt lock release is called without previous lock	= True
			OR
			Not all interrupts are released	= True
			OR
			Interrupt lock time	> 0.070 [s]
	P0604	This monitoring checks proper functionality of RAM.	Multibit failure detected	= True	No secondary parameter	= True	0.100 [s]	continuous	1-Trip	not feasible - waiver requested
			OR
			Coupling failure detected	= True
			OR
			Address decoder test detects an error	= True
		This monitoring checks proper functionality of RAM using March13 test.	March13 test detects a fault	= True	EBBC State	= Init	0.100 [s]	once	1-Trip	not feasible - waiver
		This monitoring checks proper functionality of RAM during initialization	RAM cell	<> 0	EBBC State	= Init	0.100 [s]	once	1-Trip	not feasible - waiver
			OR
			SRAM cell	<> 0
		This monitoring checks if there are too many single-bit errors in RAM.	Number of detected single-bit errors	> 1	EBBC State	= Running OR Shutdown	0.100 [s]	continuous	N-Trip	not feasible -waiver
	P0606	This monitoring checks if the electric motor driver enable line is able to be set and reset.	electric motor driver commands	= set	EBBC State	= Init	1 [s]	once	N-Trip	not feasible - waiver requested
					AND
					electric motor driver command*)	= reset
			electric motor driver commands	= reset	EBBC State	= Init	1 [s]
					AND
					electric motor driver command*)	= set
		This monitoring checks if the ECU electrical enable line can be switched (OFF or ON) by the software.	Initial test detects failure	= True	EBBC State	= Init	1 [s]	once	N-Trip	not feasible - waiver requested
		This monitoring checks if the electric motor driver circuit had been switched off.	voltage level of electric motor driver enable line	= logical low	EBBC State	= Running OR Shutdown	0.050 [s]	continuous	N-Trip	not feasible -waiver
			OR
			voltage level of electrical enable line	= logical low
		This monitoring checks the watchdog fault counter.	number of watchdog faults	> 3	EBBC State	= Running OR Shutdown	0.030 [s]	continuous	N-Trip	not feasible -waiver
		This monitoring checks if the watchdog trigger is received as expected.	Watchdog fault counter	= not incremented	EBBC State	= Init	1 [s]	once	N-Trip	not feasible -waiver
					AND
					incorrect watchdog data received	= True
		This monitoring checks if all watchdog triggers are done in the specified time.	number of watchdog trigger done	< number of watchdog tasks	EBBC State	= Running OR Shutdown	0.720 [s]	continuous	N-Trip	not feasible -waiver
		This monitoring checks the status of the watchdog at EBBC initialization state.	watchdog status	<> expected watchdog status	EBBC State	= Init	1 [s]	once	N-Trip	not feasible - waiver
		This monitoring checks the status of the watchdog.	watchdog status is not as expected	= True	EBBC State	= Running OR Shutdown	0.050 [s]	continuous	N-Trip	not feasible -waiver
		This monitoring checks if the FlexRay HW is working correctly.	Initial test detects failure	= True	EBBC State	= Init	0.100 [s]	once	N-Trip	not feasible - waiver
		This monitoring checks This monitoring strategy tests the SPI functionality at software state Init.	No or wrong fault response from ASIC while reading from an undefined address register	= True	EBBC State	= Init	0.100 [s]	once	N-Trip	not feasible - waiver requested
			OR
			No or wrong fault response from ASIC while writing to an undefined address register	= True
OR
No or wrong fault response from ASIC while writing to a non-writable register			= True
OR

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?
Active Hydraulic Accumulator
			No or wrong fault response from ASIC while reading a register with a parity error in frame 1 during transmission	= True
			OR
			No or wrong fault response from ASIC while reading a register with a parity error in frame 2 during transmission	= True
			OR
			No or wrong fault response from ASIC while reading a register with a clock failure (less clock pulses) during transmission	= True
			OR
			No or wrong fault response from ASIC while reading a register with a	= True
		This monitoring checks the SPI communication between ASIC and the microcontroller at software state Init.	Length of received data	<> length of sent data	EBBC State	= Init	0.100 [s]	continuous	N-Trip	not feasible - waiver requested
			OR
			Calculated parity	<> received parity bit
			OR
			Transmitted bit	<> bit in register
			OR
			Error frame is transmitted	= True
		This monitoring checks for a time out in SPI communication.	Duration of data transfer to ASIC	> 0.010 [s]	EBBC State	= Init	0.500 [s]	continuous	N-Trip	not feasible -waiver
		This monitoring checks the SPI communication between ASIC and the microcontroller at software state Running.	Length of received data	<> length of sent data	EBBC State	= Running	0.500 [s]	continuous	N-Trip	not feasible - waiver requested
			OR
			Calculated parity	<> received parity bit
			OR
			Transmitted bit	<> bit in register
			OR
			Error frame is transmitted	= True
	P0607	This monitoring checks if there is a microcontroller exception.	Data abort occurred	= True	No secondary parameter	= True	0.100 [s]	continuous	1-Trip	not feasible - waiver requested
			OR
			Prefetch abort occurred	= True
			OR
			Undefined instruction occurred	= True
		This monitoring checks if the reference voltage of the ADC is in range.	ADC reference voltage	< 1.145 [V]	No secondary parameter	= True	0.020 [s]	continuous	N-Trip	not feasible -waiver
			OR
			ADC reference voltage	> 1.345 [V]
		This monitoring checks proper functionality of fault path in case of missing or wrong watchdog trigger.	BMS	= switched on	(watchdog trigger	= missed	1 [s]	once	N-Trip	not feasible - waiver requested
					OR
					watchdog trigger timing)	= wrong
					AND
					EBBC State)	= init
		This monitoring checks if the error pin event counter is working properly.	Error pin event counter	= not incremented	EBBC State	= Init	1 [s]	once	N-Trip	not feasible -waiver
		This monitoring checks if there is a HET exception.	HETOFF1 - failure detected flag	= True	No secondary parameter	= True	0.100 [s]	continuous	1-Trip	not feasible -waiver
		This monitoring checks for proper HETTU addressing functionality.	HETTU status - pointer error flag	= True	No secondary parameter	= True	immediately	continuous	1-Trip	not feasible -waiver
		This monitoring checks the internal bus of HETTU.	HETTU status - bus error flag	= True	No secondary parameter	= True	immediately	continuous	1-Trip	not feasible -waiver
		This monitoring checks if HETTU is busy.	HETTU status - busy error flag	= True	No secondary parameter	= True	immediately	continuous	1-Trip	not feasible -waiver
		This monitoring checks if there is a HETTU exception.	INTOFF0 - failure detected flag	= True	No secondary parameter	= True	immediately	continuous	1-Trip	not feasible -waiver
		This monitoring checks if there was a task failed to call.	Watchdog detects a missing task	= True	No secondary parameter	= True	0.120 [s]	continuous	1-Trip	not feasible - waiver requested
		This monitoring checks if the HET has the proper reference signal frequency.	\| defined frequency - calculated frequency \| / defined frequency	> 5 [%]	EBBC State	= Running OR Shutdown	0.015 [s]	continuous	N-Trip	not feasible -waiver
		This monitoring checks if the ASIC has detected an internal failure.	Charge-pump failure bit	= True	EBBC State	= Init	0.200 [s]	continuous	N-Trip	not feasible - waiver requested
			OR
			Clock-input-signal failure bit	= True
			OR
			Internal-oscillator-circuit failure bit	= True
		This monitoring checks the voltage comparators of the ASIC.	Voltage comparator test error flag set	= True	EBBC State	= Init	0.100 [s]	once	N-Trip	not feasible -waiver
		This monitoring checks if the electric motor idle position has been stored.	EEPROM cell is empty	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
		This monitoring checks This monitoring checks if the electric motor backward stop position value in EEPROM is empty.	EEPROM cell is empty	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver requested
		This monitoring checks if the plunger release position value in EEPROM is empty.	EEPROM cell is empty	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver
		This monitoring checks if BPTS calibration values in EEPROM are empty.	Number of EEPROM cells where BPTS calibration value is empty	>= 1	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
		This monitoring checks if the EEPROM cell which contains the calibrated offset value of BPTS1 is empty.	EEPROM cell is empty	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver requested
		This monitoring checks if the EEPROM cell which contains the calibrated offset value of BPTS2 is empty.	EEPROM cell is empty	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver requested
		This monitoring checks if the EEPROM cell which contains the RPS1 X value offset is empty.	EEPROM cell is empty	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver
		This monitoring checks if the EEPROM cell which contains the RPS1 Y value offset is empty.	EEPROM cell is empty	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
		This monitoring checks if the EEPROM cell which contains the RPS1 synchronicity is empty.	EEPROM cell is empty	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
		This monitoring checks if the EEPROM cell which contains the RPS1 offset is empty.	EEPROM cell is empty	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
		This monitoring checks if the voltage pre- regulator mode in ASIC does fit to the flashed SW configuration.	voltage pre-regulator mode failure bit	= set	EBBC State	= Running OR Shutdown	0.200 [s]	continuous	N-Trip	not feasible - waiver requested
	P060B	This monitoring checks if ADC conversion time is too long.	Number of conversions which could not be finished in time	> 9	No secondary parameter	= True	immediately	continuous	N-Trip	not feasible -waiver
	P060B	This monitoring checks for proper ADC self-test functionality.	\| difference between the two ADC measurements per channel	> 540 [digits]	No secondary parameter	= True	0.200 [s]	continuous	N-Trip	not feasible -waiver
	P060C	This monitoring checks for proper MCU Compare Module functionality.	Core Compare Module self test failed	= True	EBBC State	= Running	0.100 [s]	once	1-Trip	not feasible -waiver
		This monitoring checks the correct CRC of Flash EEPROM.	double bit error	= detected	No secondary parameter	= True	0.100 [s]	continuous	1-Trip	not feasible -waiver
OR
number of detected single bit errors			> 1
This monitoring checks if a NMI (Non-makeable Interrupt) has occurred.		NMI occurred	= True	EBBC State	= Init	0.100 [s]	once	N-Trip	not feasible -waiver
This monitoring checks if a microcontroller core or peripheral failure occurred.		Error pin	= logical low	EBBC State	= Running OR Shutdown	0.100 [s]	continuous	N-Trip	not feasible -waiver
This monitoring checks if the NMI mechanism is running properly.		no NMI occurred	= True	EBBC State	= Init	0.100 [s]	continuous	N-Trip	not feasible -waiver
		OR
		Not expected NMI occurred	= True
P0610	This monitoring checks if tester can Clear DTC in Production mode using physical addressing.	mode $04 is executable in physical addressing mode	= True	EBBC State	= Diag	immediately	continuous	1-Trip	feasible	software control strategy
P0610	This monitoring checks if the Multiple Cycles without Complete Post-run Monitoring is suppressed..	Multiple Cycles without Complete Post-run Monitoring is suppressed	= True	EBBC State	= Diag	immediately	continuous	1-Trip	feasible	software control strategy
P062F	This monitoring checks if the stored electric motor idle position value can be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver requested
	This monitoring checks if the stored electric motor backward stop position value can be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver requested
	This monitoring checks if the stored plunger release position value can be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
	This monitoring checks if it is possible to write data in EEPROM.	writing operation	> 0.025 [s]	EBBC State	= Running OR Shutdown	immediately	continuous	N-Trip	not feasible -waiver
		AND
		read data	<> written data
	This monitoring checks EEPROM reading accessibility.	PDM flag set	= True	EBBC State	= Init	0.100 [s]	continuous	1-Trip	not feasible -waiver
	This monitoring checks if calibrated linearization values, i.e. the characteristic curve of BPTS1 can be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver requested
	This monitoring checks if the calibrated offset value of BPTS1 can be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
	This monitoring checks if calibrated linearization values, i.e. the characteristic curve of BPTS2 can be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver requested
	This monitoring checks if the calibrated offset value of BPTS2 can be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
	This monitoring checks if the stored offset of the RPS1 X-value could be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver
	This monitoring checks if the stored offset of the RPS1 Y-value could be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
	This monitoring checks if the stored value of RPS1 synchronicity could be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
	This monitoring checks if the RPS1 offset can be read.	read failure occurred	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible -waiver
U0401	This monitoring checks the consistency of the Vehicle OBD Type information received in	The received Vehicle OBD Type information is not consistent	= True	EBBC State	= Running	0.020 [s]	continuous	1-Trip	feasible	external signal modification box
U0401		The received Vehicle OBD Type information is not consistent	= True	AND	= Running	0.020 [s]	continuous	1-Trip	feasible	external signal modification box

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Active Hydraulic Accumulator
		Motor_Code_01 PDU sent by the engine ECU.			Motor Start System information received	= True
		This monitoring checks the consistency of the Motor Start System information received in Motor_31 PDU sent by the engine ECU.	The received Vehicle Motor Start System information is not consistent	= True	EBBC State	= Running	0.020 [s]	continuous	1-Trip	feasible	external signal modification box
		This monitoring checks the consistency of the Vehicle OBD Type information or Hybrid type signal information received in Motor_Code_01 PDU sent by the engine ECU.	The received Vehicle OBD Type information is not consistent	= True	EBBC State	= Running	0.020 [s]	continuous	1-Trip	feasible	external signal modification box
			OR		AND
			The received Vehicle Hybrid type information is not consistent	= True	Motor Start System information not received	= True
	U3001	This monitoring checks if the post-run was completely done in the previous driving cycles.	The post-run did not finish completely for a defined number of consecutive times	> 4 times	EBBC State	= Init OR Running	0.020 [s]	once	1-Trip	feasible	break out box
			AND
			There is an OBD relevant failure stored in the Failure Memory	= True
Logic Voltage Sensor 3	P0606	This monitoring checks if Logic Voltage Sensor is out of range low.	Supply Voltage of ECU	< 4.9 [V]	EBBC State	= Running OR Shutdown	0.200 [s]	continuous	N-Trip	not feasible - waiver requested
Power Voltage Sensor 1	U3505	This monitoring checks if there is an open circuit failure on Voltage Sensor 1.	Voltage Sensor 1	< 2	EBBC State	= Running OR Shutdown	0.1 [s]	continuous	N-Trip	feasible	break out box
Power Voltage Sensor 2	P0562	This monitoring checks if there is too low power supplied to EBBC.	Voltage Sensor 1	< 6.5	EBBC State	= Running OR Shutdown	0.2 [s]	continuous	N-Trip	feasible	break out box
	P0607	This monitoring checks rationality of Voltage Sensor 1 and Voltage Sensor 2 by crosscheck.	Voltage Sensor 2 / Voltage Sensor 1	> 1.321	EBBC State	= Running OR Shutdown	2 [s]	continuous	N-Trip	not feasible - waiver requested
			OR
			Voltage Sensor 2 / Voltage Sensor 1	< 0.766
Power Voltage Sensor 3	P0563	This monitoring checks if there is too high power supplied to EBBC.	Voltage Sensor 1	> 17.5	EBBC State	= Running OR Shutdown	0.1 [s]	continuous	N-Trip	feasible	break out box
Rotor Position Sensor 1	C0588	This monitoring checks if the vector length value from the RPS1 is out of range low	calculated RPS1 vector length	< 3922 [digits]	EBBC State	= Running OR Shutdown	0.050 [s]	continuous	N-Trip	not feasible - waiver requested
	C0589	This monitoring checks if the vector length value from the RPS1 is out of range high.	calculated RPS1 vector length	> 2000 [digits]	EBBC State	= Running OR Shutdown	0.050 [s]	continuous	N-Trip	not feasible - waiver requested
	C058A	This monitoring checks if the RPS1 has a gradient failure.	\|RPS1 gradient\|	> 73 [°/ms]	EBBC State	= Running OR Shutdown	immediately	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks the rationality of RPS1.	\| measured RPS1 angle - recalculated angle \|	> 7.8 [°]	EBBC State	= Running OR Shutdown	0.050 [s]	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks if there is a noise in the RPS1 vector length.	\| noise amplitude \|	> 190 [digits]	EBBC State	= Running OR Shutdown	0.050 [s]	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks if all RPS1 data are periodically updated.	update-flag of RPS1 safety word	= NOT_UPDATED	EBBC State	= Running OR Shutdown	0.100 [s]	continuous	N-Trip	not feasible - waiver requested
			OR
			update-flag of RPS1 safety word	= INIT
		This monitoring checks if the RPS1 IC configuration values match to stored values	RPS1 configuration	<> with stored configuration	EBBC State	= Running OR Shutdown	0.020 [s]	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks if the RPS1 internal clock works properly.	counter increment	< 6	EBBC State	= Running OR Shutdown	0.015 [s]	continuous	N-Trip	not feasible - waiver requested
			OR
			counter increment	> 24
		This monitoring checks the CRC of RPS1 communication.	Calculated checksum	<> received checksum	EBBC State	= Running OR Shutdown	immediately	continuous	N-Trip	not feasible - waiver requested
		This monitoring checks if there was an unexpected reset at RPS1.	reset-flag of RPS1 safety word	= True	EBBC State	= Running OR Shutdown	immediately	continuous	N-Trip	not feasible - waiver requested
	C05BB	This monitoring checks if the RPS1 supply voltage is in range.	voltage-flag of RPS1 safety word	= True	EBBC State	= Running OR Shutdown	0.020 [s]	continuous	N-Trip	not feasible - waiver requested
Temperature Sensor 1	P25C6	This monitoring checks if Temperature Sensor 1 is out of range low.	Temperature Sensor 1	< -41 [°C]	EBBC State	= Running OR Shutdown	0.600 [s]	continuous	N-Trip	not feasible - waiver requested
Temperature Sensor 1	P25C7	This monitoring checks if Temperature Sensor 1 is out of range high.	Temperature Sensor 1	> 180 [°C]	EBBC State	= Running OR Shutdown	0.600 [s]	continuous	N-Trip	not feasible - waiver requested
Temperature Sensor 2	C0579	This monitoring checks if Temperature Sensor 2 is out of range low.	Temperature Sensor 2	< -41 [°C]	EBBC State	= Running OR Shutdown	0.600 [s]	continuous	N-Trip	not feasible - waiver requested
	C057A	This monitoring checks if Temperature Sensor 2 is out of range high.	Temperature Sensor 2	> 180 [°C]	EBBC State	= Running OR Shutdown	0.600 [s]	continuous	N-Trip	not feasible - waiver requested
	C057E	This monitoring checks rationality of Temperature Sensor 1 and Temperature Sensor 2 by crosscheck.	\| Temperature Sensor 1 - Temperature Sensor 2 \|	> 10 [°C]	EBBC State	= Running OR Shutdown	0.600 [s]	continuous	N-Trip	not feasible - waiver requested
FlexRay Communication
Cumulated Failure Monitoring	U12BE	This monitoring checks if there is any failure in the received ESP_21 PDUs sent by the ESP ECU or if the signals in the data unit have any failure.	the sum of the PDU failures and the detected signal failures in the these data units	> 100	EBBC State	= Running OR Shutdown	2 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any failure in the received ESP_28 PDUs sent by the ESP ECU or if the Requested Pressure for Brake Force Blending signal in the data units has any failure.	the sum of the PDU failures and the detected signal failures in the these data units	greater 20	EBBC State	= Running OR Shutdown	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any failure in the received ESP_28 PDUs sent by the ESP ECU or if the Break pressure signal in the data units has any failure.	the sum of the PDU failures and the detected signal failures in the these data units	> 50	EBBC State	= Running OR Shutdown	0.500 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any failure in the received ESP_28 PDUs sent by the ESP ECU or if the Force Blending Signal in the data units has any failure.	the sum of the PDU failures and the detected signal failures in the these data units	> 50	EBBC State	= Running OR Shutdown	0.500 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any failure in the received ESP_28 PDUs sent by the ESP ECU or if the Driver Brake Request Signal in the data units has any failure.	the sum of the PDU failures and the detected signal failures in the these data units	> 50	EBBC State	= Running OR Shutdown	0.500 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any failure in the ESP_28 PDUs sent by the ESP ECU or if the Maximum Wheel Pressure Signal in the data units has any failure.	the sum of the PDU failures and the detected signal failures in the these data units	> 50	EBBC State	= Running OR Shutdown	0.5 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any failure in the ESP_38 PDUs sent by the ESP ECU or if the Pressure Limit Signal in the data units has any failure.	the sum of the PDU failures and the detected signal failures in the these data units	> 20	EBBC State	= Running OR Shutdown	0.2 [s]	continuous	N-Trip	feasible	external signal modification box
General FlexRay Communication Monitoring	P0606	This monitoring checks if there is RAM parity error detected in RAM register of FlexRay Communication Controller.	Parity bit stored in the Communication Controller Register	<> calculated parity bit	No secondary parameter	= True	0.010 [s]	continuous	N-Trip	not feasible - waiver requested

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Active Hydraulic Accumulator
	P0607	This monitoring checks if there is Flexray Communication Controller access error.	no response from Communication Controller	= True	No secondary parameter	= True	immediately	continuous	N-Trip	not feasible - waiver requested
	P0607	This monitoring checks if the FlexRay controller self test failed.	FlexRay controller test detects failure	= True	EBBC State	= Init	immediately	once	N-Trip	not feasible - waiver requested
	U0080	This monitoring checks the consistent between network management request and real state of communication.	Inconsistency detected between FlexRay Network Management request and real state of communication	= True	No secondary parameter	= True	0.300 [s]	continuous	N-Trip	not feasible - waiver requested
	U0080	This monitoring checks if the communication between the components is synchronized through the Flexray network.	Protocol Operation Control state in FlexRay Communication Controller is not synchronized	= True	No secondary parameter	= True	0.070 [s]	continuous	N-Trip	feasible	break out box
Invalid Data Monitoring	U0401	This monitoring checks if the message counter of Motor_Code_01 PDUs sent by the Motor ECU are properly received.	message counter of the PDU is not periodically incremented	> 5	EBBC State	= Running	4.8 [s]	continuous	1-Trip	feasible	external signal modification box
	U0401	This monitoring checks if the CRC of Motor_Code_01 PDUs sent by the Motor ECU are correct.	Calculated checksum	<> received checksum	EBBC State	= Running	0.960 [s]	continuous	1-Trip	feasible	external signal modification box
	U0418	This monitoring checks if the message counter of ESP_21 PDUs sent by the ESP ECU are properly received.	message counter of the PDU is not periodically incremented	> 9	EBBC State	= Running OR Shutdown	0.180 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CRC of ESP_21 PDUs sent by the ESP ECU are correct.	Calculated checksum	<> received checksum	EBBC State	= Running OR Shutdown	0.020 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the message counter of ESP_28 PDUs sent by the ESP ECU are properly received.	message counter of the PDU is not periodically incremented	> 19	EBBC State	= Running OR Shutdown	0.190 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CRC of ESP_28 PDUs sent by the ESP ECU are correct.	Calculated checksum	<> received checksum	EBBC State	= Running OR Shutdown	0.010 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the message counter of ESP_38 PDUs sent by the ESP ECU are properly received.	message counter of the PDU is not periodically incremented	> 19	EBBC State	= Running OR Shutdown	0.190 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CRC of ESP_38 PDUs sent by the ESP ECU are correct.	Calculated checksum	<> received checksum	EBBC State	= Running OR Shutdown	0.010 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any signal error in the received ESP_21 PDU sent by the ESP ECU.	Signal error counted in consequently received messages	> 3	EBBC State	= Running OR Shutdown	0.060 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the received signals of ESP_21 PDU sent by the ESP ECU are invalid or if there is under voltage signal value received.	consequently received invalid signal values	> 100	EBBC State	= Running OR Shutdown	2 [s]	continuous	N-Trip	feasible	external signal modification box
			sum of vehicle speed Under voltage signal value	> 100	EBBC State	= Running OR Shutdown	2 [s]
					AND
					Vehicle velocity	> 6.2
		This monitoring checks if there is any signal error in the received ESP_28 PDU Requested Pressure for Brake Force Blending sent by the ESP ECU.	signal error counted in consequently received messages	greater 3	EBBC State	= Running OR Shutdown	0.030 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the received Requested Pressure for Brake Force Blending of ESP_28 PDU sent by the ESP ECU is invalid.	consequently received invalid signal values	greater 20	EBBC State	= Running OR Shutdown	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any signal error in the received Break pressure signal of ESP_28 PDU sent by the ESP ECU.	Signal error counted in consequently received messages	> 3	EBBC State	= Running OR Shutdown	0.030 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the received Break pressure signal of ESP_28 PDU sent by the ESP ECU is invalid.	consequently received invalid signal values	> 50	EBBC State	= Running OR Shutdown	0.500 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the received Force Blending Signal of ESP_28 PDU sent by the ESP ECU is invalid.	consequently received invalid signal values	> 50	EBBC State	= Running OR Shutdown	0.500 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any signal error in the received Driver Brake Request Signal of ESP_28 PDU sent by the ESP ECU.	Signal error counted in consequently received messages	> 3	EBBC State	= Running OR Shutdown	0.030 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the received Driver Brake Request Signal of ESP_28 PDU sent by the ESP ECU is invalid.	consequently received invalid signal values	> 50	EBBC State	= Running OR Shutdown	0.500 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any signal error in the received ESP_28 PDU Maximum Wheel Pressure Signal sent by the ESP ECU.	Signal error counted in consequently received messages	> 3	EBBC State	= Running OR Shutdown	0.030 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the received Maximum Wheel Pressure Signal of ESP_28 PDU sent by the ESP ECU is invalid.	consequently received invalid signal values	> 50	EBBC State	= Running OR Shutdown	0.500 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the received Pressure Limit Signal of ESP_38 PDU sent by the ESP ECU is invalid.	consequently received invalid signal values	> 20	EBBC State	= Running OR Shutdown	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
time out Monitoring	U0100	This monitoring checks if the Motor_31 PDUs sent by Motor ECU are received within the specified monitoring time.	number of consequently not received PDUs	greater 5	EBBC State	= Running	4.8 [s]	continuous	1-Trip	feasible	external signal modification box
		This monitoring checks if the Motor_Code_01 PDUs are received within the specified monitoring time.	number of consequently not received PDUs	> 5	EBBC State	= Running	4.8 [s]	continuous	1-Trip	feasible	external signal modification box
		This monitoring checks if the OBD_01 PDUs sent by Motor ECU are received within the specified monitoring time.	number of consequently not received PDUs	> 10	EBBC State	= Running	0.800 [s]	continuous	1-Trip	feasible	external signal modification box
	U0129	This monitoring checks if the ESP_21 PDU sent by the ESP ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 9	EBBC State	= Running OR Shutdown	0.180 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the ESP_28 PDU sent by the ESP ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 19	EBBC State	= Running OR Shutdown	0.190 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the ESP_38 PDUs sent by the ESP ECU are received within the specified monitoring time.	number of consequently not received PDUs	> 19	EBBC State	= Running OR Shutdown	0.190 [s]	continuous	N-Trip	feasible	external signal modification box
	U0155	This monitoring checks if the Kombi_02 PDUs sent by the Gateway ECU in Flexray are received within the specified monitoring time.	number of consequently not received PDUs	> 5	EBBC State	= Running	5 [s]	continuous	N-Trip	feasible	external signal modification box
Vehicle Identification Number Monitoring	C0546	This monitoring checks if the reference VIN stored in EEPROM is equal to the VIN received from Network.	VIN stored in EEPROM	<> received VIN	EBBC State	= Init	0.020 [s]	once	N-Trip	feasible	external signal modification box
	U0141	This monitoring checks if there was no VIN received.	VIN does not received	= True	EBBC State	= Init	5 [s]	once	N-Trip	feasible	external signal modification box
	U0431	This monitoring checks if a VIN received by Network is at initialization value.	Received VIN is at initialization value	= True	EBBC State	= Init	0.020 [s]	once	N-Trip	feasible	external signal modification box
Private Communication
General Private Communication Monitoring	U0037	This monitoring checks if CAN Bus off have occurred.	CAN bus state	= Bus off	EBBC State	= Running	0.250 [s]	continuous	N-Trip	not feasible - waiver requested
General Private Communication Monitoring	U0037	This monitoring checks if there is a CAN bus off or global time out.	no CAN message detected	> 10	EBBC State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
Invalid Data Monitoring	U01B4	This monitoring checks if the CRC of the EBBC ECU CAN messages received by AHA are correct.	recalculated CRC does not match the received CRC	> 3	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
Invalid Data Monitoring	U01B4	This monitoring checks if the CRC of the EBBC ECU CAN messages received by AHA are correct.	recalculated CRC does not match the received CRC	> 3	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Active Hydraulic Accumulator
		This monitoring checks if the data length codes of EBBC ECU CAN messages received by AHA are correct.	data length of EBBC ECU CAN message is not correct	> 3	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the data length codes of EBBC ECU CAN messages received by AHA are correct.	data length of EBBC ECU CAN message is not correct	> 3	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	U04B4	This monitoring checks if the message counters of AHA ECU CAN messages are properly received.	message counter of the PDU is not periodically incremented	> 4	AHA State	= Running	0.040 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CRC of the AHA ECU CAN messages are correct.	recalculated CRC does not match the received CRC	> 3	AHA State	= Running	0.030 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any signal error value in the received Supply Current Signal at SAct_1 PDU sent by the AHA ECU.	signal error counted in consequently received messages	greater 20	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any signal error value in the received Supply Voltage Signal at SAct_1 PDU sent by the AHA ECU.	signal error counted in consequently received messages	greater 20	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any signal error value in the received Volume Signal at SAct_1 PDU sent by the AHA ECU.	signal error counted in consequently received messages	greater 20	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if there is any signal error value in the received Piston Volume Signal at SAct_3 PDU sent by the AHA ECU.	signal error counted in consequently received messages	greater 400	AHA State	= Running	4.000 [s]	continuous	N-Trip	feasible	external signal modification box
	U04B5	This monitoring checks if the AHA periodically receives updated EBBC ECU CAN messages.	message counter of the PDU is not periodically incremented	> 5	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	U04B5	This monitoring checks if the AHA periodically receives updated EBBC ECU CAN messages.	message counter of the PDU is not periodically incremented	> 5	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
time out Monitoring	U0038	This monitoring checks if the CAN SAct_1 message sent by AHA ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 10	EBBC State	= Running	0.100 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CAN SAct_3 message sent by AHA ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 5	EBBC State	= Running	5 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CAN SAct_4 message sent by AHA ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 5	EBBC State	= Running	5 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CAN SAct_5 message is received within the specified monitoring time.	number of consequently not received PDUs	> 10	EBBC State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CAN SAct_6 message sent by AHA ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 5	EBBC State	= Running	5 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the ECU CAN SAct_7 message sent by AHA ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 5	EBBC State	= Running	5 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CAN SAct_8 message sent by AHA ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 5	EBBC State	= Running	5 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CAN SAct_OBD_1 message sent by AHA ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 5	EBBC State	= Running	5 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CAN SAct_OBD_2 message sent by AHA ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 5	EBBC State	= Running	5 [s]	continuous	N-Trip	feasible	external signal modification box
		This monitoring checks if the CAN SAct_OBD_3 message sent by AHA ECU is received within the specified monitoring time.	number of consequently not received PDUs	> 5	EBBC State	= Running	5 [s]	continuous	N-Trip	feasible	external signal modification box
	U01B4	This monitoring checks if CAN EBBC Message 1 is received by AHA within the specified monitoring time.	number of CAN messages sent by EBBC ECU are consequently received by AHA	> 10	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box
	U01B4	This monitoring checks if CAN EBBC Message 2 is received by AHA within the specified monitoring time.	number of CAN messages sent by EBBC ECU are consequently received by AHA	> 10	AHA State	= Running	0.200 [s]	continuous	N-Trip	feasible	external signal modification box