Brake System Control Module --, 2021 MY

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
Electronic Control Unit	C006B	This monitoring checks if the ABS is correctly triggered.	Anti-lock Brake System intervention for a period of time	> 60 [s]	System voltage	> 6.9 [V]	60 [s]	Continuous	N-Trip	Not feasible - waiver requested
	C006C	This monitoring checks if VDC (Vehicle Dynamics Control) is active for an implausibly long time.	(Vehicle speed	< 62 [mph]	System voltage	> 6.9 [V]	10 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			Vehicle Dynamics Control activation for time)	> 10 [s]	Vehicle speed	> 13.67 [mph]
			OR
			(Vehicle speed	> 62 [mph]
			AND
			Vehicle Dynamics Control activation for time)	> 5 [s]
	C0563	This monitoring checks if there is implausible ABS control or spinning vehicle is detected during ABS Stand alone mode.	Implausible ABS control is detected	= True	Ignition key	= On	2 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					ABS control is active	= True
			Implausible ABS control is detected	= True	ABS Stand alone mode is active	= True	2 [s]
			OR		AND
			Spinning vehicle is detected	= True	ABS control is active	= True
	C0598	This monitoring checks if EBBC ECU detects an error which degrade the EBBC, and the Hydraulic Boost Control (HBC) Request from the EBBC ECU is valid.	EBBC error is detected	= True	Ignition key	= On	30 [s]	Continuous	N-Trip	Feasible	external signal modification box
			AND		AND
			HBC Request is set	= True	Bus communication is active	= True
			AND
			HBC Request confirmed by Fallback Release	= True
		This monitoring checks the plausibility of the Hydraulic Boost Control (HBC) Request and the Fallback Release of the EBBC ECU.	Fallback Release is set before HBC Request	= True	Ignition key	= On	30 [s]	Continuous	N-Trip	Feasible	external signal modification box
			OR		AND
			Inverse value of HBC Request and Fallback Release is received	= True	Bus communication is active	= True
			OR
			Fallback Release is not set after HBC Request	= True
	C1016	This monitoring checks if the system is reduced to ABS functionality, by setting a defined EEPROM value.	System is degraded to ABS functionality by a specific EEPROM entry	= True	Ignition key	= On	0.005 [s]	Continuous	N-Trip	Feasible	software control strategy
					AND
					Degradation of ABS in EEPROM	= True
		This monitoring checks if the system is reduced to TCS functionality, by setting a defined EEPROM value.	System is degraded to TCS functionality by a specific EEPROM entry	= True	Ignition key	= On	0.005 [s]	Continuous	N-Trip	Feasible	software control strategy
					AND
					Degradation of TCS in EEPROM	= True
	C1163	This monitoring checks if a fake fault is properly set by the customer tester to degrade System to roller test bench mode.	Dyno mode is active	= True	Ignition key	= On	0.04 [s]	Continuous	N-Trip	Feasible	software control strategy
	C2001	This monitoring checks if the ESC dataset version that was programmed in the ECU is compatible with the programmed software version.	Not compatible version of ESC dataset in the system	= True	Ignition key	= On	0.02 [s]	Once	N-Trip	Feasible	software control strategy
					AND
					ECU initialization running	= True
	P0560	This monitoring checks if ignitions states of hardware and FlexRay signals are different.	Ignition state of hardware	= Low	ESP hardware ignition state	= Low	1 [s]	Continuous	1-Trip	Feasible	external signal modification box
			AND		AND
			Ignition state of software	= High	No engine cranking	= True
					AND
					No flexray communication failure	= True
	P0563	This monitoring checks if the motor relay is in an over voltage situation.	Voltage at motor relay	> 17 [V]	System voltage	> 6.9 [V]	1.02 [s]	Continuous	N-Trip	Feasible	break out box
					AND
					EBCU state	= Started with software reset
	P0601	This monitoring checks the correct CRC of the Flash Memory.	Double bit error detected	= True	System voltage	> 6.9 [V]	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR
			Number of detected single-bit errors	> 1
	P0602	This monitoring checks if there was jitter in task execution.	Current start time of a task	> ideal start time + 5 [%]	Ignition key	= On	0.005 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks if the task did not start in the expected time.	Watchdog detects a missing task	= True	Ignition key	= On	0.12 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks for exceptions in Operating System.	Software program execution failure detected	= True	Ignition key	= On	0.12 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks if the microcontroller stack is changed.	Check-word at begin of stack has changed	= True	Ignition key	= On	0.08 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR
			Check-word at end of stack has changed	= True
		This monitoring checks if an interrupt fault has occurred.	Software interrupt occurred	= True	Ignition key	= On	0.02 [s]	once after every time when the monitoring is indicate	N-Trip	Not feasible - waiver requested
			OR
			Invalid interrupt occurred	= True
			OR
			Interrupt lock release is called without previous lock	= True
			OR
			Not all interrupts are released	= True
			OR
			Interrupt lock time	> 0.001 [s]
		This monitoring checks if there is a mismatch between the configured WSS software variant and the mounted WSS hardware variant.	Mismatch between the configured WSS software variant and the mounted WSS hardware variant	= True	System voltage	> 6.9 [V]	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
	P0604	This monitoring checks proper functionality of RAM.	Multibit failure detected	= True	System voltage	> 6.9 [V]	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR
			Coupling failure detected	= True
OR
Address decoder test detects an error			= True
This monitoring checks the proper functionality of RAM during initialization.		Any of the RAM cells	<> 0	Ignition key	= On	0.1 [s]	Once	N-Trip	Not feasible - waiver requested
This monitoring checks if there are too many single-bit errors in RAM.		Number of detected single-bit errors	> 2	Ignition key	= On	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
P0606	This monitoring checks for proper MCU Compare Module functionality.	Core Compare Module self test failed	= True	System voltage	> 6.9 [V]	0.1 [s]	Once	N-Trip	Not feasible - waiver requested
	This monitoring checks if there is a microcontroller exception.	Data abort occurred	= True	Ignition key	= On	0.1 [s]	Once after every time when the monitoring is indicate	N-Trip	Not feasible - waiver requested
		OR
		Prefetch abort occurred	= True
		OR
		Undefined instruction occurred	= True
	This monitoring checks if there is a HET exception.	Failure detected flag is set	= True	Ignition key	= On	0.1 [s]	Once after every time when the monitoring is indicate	N-Trip	Not feasible - waiver requested
	This monitoring checks for proper HETTU addressing functionality.	HETTU status - pointer error flag	= True	Ignition key	= On	0.005 [s]	Continuous	N-Trip	Not feasible - waiver requested
	This monitoring checks the internal bus of HETTU.	HETTU status - bus error flag	= True	Ignition key	= On	0.005 [s]	Continuous	N-Trip	Not feasible - waiver requested
	This monitoring checks if HETTU is busy.	HETTU status - busy error flag	= True	Ignition key	= On	0.005 [s]	Continuous	N-Trip	Not feasible - waiver requested
	This monitoring checks if there is a HETTU exception.	INTOFF0 - failure detected flag	= True	Ignition key	= On	0.005 [s]	Once after every time when the monitoring is indicate	N-Trip	Not feasible - waiver requested
	This monitoring checks if an NMI (Non-maskable Interrupt) has occurred.	NMI occurred	= True	Ignition key	= On	0.1 [s]	Once	N-Trip	Not feasible - waiver requested
	This monitoring checks if a microcontroller core or peripheral failure occurred.	Error pin is set to logical low	= True	Ignition key	= On	0.1 [s]	Once	N-Trip	Not feasible - waiver requested
	This monitoring checks if the FlexRay HW is working correctly.	Initial test detects failure	= True	System voltage	> 6.9 [V]	0.1 [s]	Once	N-Trip	Not feasible - waiver requested
	This monitoring checks if the HET has the proper reference signal frequency.	| defined frequency - calculated frequency | / defined frequency	> 5 [%]	Ignition key	= On	0.015 [s]	Continuous	N-Trip	Not feasible - waiver requested
	This monitoring checks proper functionality of RAM using March 13 test.	March 13 test detects a fault	= True	Ignition key	= On	0.1 [s]	Once	N-Trip	Not feasible - waiver requested
				AND
				EBCU after run in previous driving cycle completed	= True
	This monitoring checks if the NMI mechanism is running properly.	No NMI occurred	= True	System voltage	> 6.9 [V]	0.1 [s]	Once	N-Trip	Not feasible - waiver requested
		OR
		Not expected NMI occurred	= True
P0607	This monitoring checks if the Automated Park Brake (APB) emergency supply circuit is working properly.	Short circuit of one or both emergency supply transistors detected	= True	Ignition key	= On	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
				AND
				APB emergency supply initial test is done	= True
				AND
				Emergency supply is not used	= True
	This monitoring checks if the ECU electrical enable line can be switched.	Initial test detects failure	= True	System voltage	> 6.9 [V]	1 [s]	Once	N-Trip	Not feasible - waiver requested
	This monitoring checks the ECU (Electronic Control Unit) internal hydraulic enable line.	ECU internal hydraulic enable line has a short to ground	= True	System voltage	> 6.9 [V]	1 [s]	Once	N-Trip	Not feasible - waiver requested
		OR
		ECU internal hydraulic enable line has a short to supply voltage (3.3V)	= True
		OR
		The ECU internal hydraulic enable line cannot be switched ON or OFF by	= True
	This monitoring checks if the enable line is set properly.	(Missing (low level) enable signal of ECU internal hydraulic line is detected	= True	System voltage	> 6.9 [V]	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
		AND
		For time)	> 0.05 [s]
		OR
		(Missing (low level) enable signal of ECU internal electrical line is detected	= True
		AND
		For time)	> 0.05 [s]
	This monitoring checks if the error pin event counter is working properly.	Error pin event counter is not incremented	= True	Ignition key	= On	1 [s]	Once	N-Trip	Not feasible - waiver requested
				AND
				Fail-Safe Logic Test is running	= True

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
		This monitoring checks the feedback of the Fail- Safe Logic Test.	Missing watchdog trigger	= True	System voltage	> 6.9 [V]	1 [s]	Once	N-Trip	Not feasible - waiver requested
			AND
			No switched off valve relay gate	= True
		This monitoring checks if the valve relay gate actuation is properly switched off after receiving the command via a Serial Peripheral Interface (SPI) during the Fail-Safe Logic Test.	After receiving the command via SPI, the valve relay gate is still not switched off	= True	System voltage	> 6.9 [V]	1 [s]	Once	N-Trip	Not feasible - waiver requested
					AND
					Fail-Safe Logic Test is running	= Running
		This monitoring checks the watchdog fault counter.	Watchdog fault counter	> 3	System voltage	> 6.9 [V]	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					ECU started with software reset	= True
		This monitoring checks if the watchdog fault counter is counting properly.	Watchdog fault counter is not incremented	= True	System voltage	> 6.9 [V]	1 [s]	Once	N-Trip	Not feasible - waiver requested
					AND
					Incorrect watchdog data received	= True
		This monitoring checks if all watchdog triggers are done.	Number of watchdog trigger done < number of watchdog tasks	= True	System voltage	> 6.9 [V]	0.72 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks the status of the watchdog at ECU initialization state.	Watchdog status is not as expected	= True	System voltage	> 6.9 [V]	1 [s]	Once	N-Trip	Not feasible - waiver requested
		This monitoring checks the status of the watchdog.	watchdog status is not as expected	= True	System voltage	> 6.9 [V]	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks the SPI functionality at software state Init.	No or wrong fault response from ASIC while reading from an undefined address register	= True	System voltage	> 6.9 [V]	0.1 [s]	Once	N-Trip	Not feasible - waiver requested
			OR
			No or wrong fault response from ASIC while writing to an undefined address register	= True
			OR
			No or wrong fault response from ASIC while writing to a non-writable register	= True
			OR
			No or wrong fault response from ASIC while reading a register with a parity error in frame 1 during transmission	= True
			OR
			No or wrong fault response from ASIC while reading a register with a parity error in frame 2 during transmission	= True
			OR
			No or wrong fault response from ASIC while reading a register with a clock failure (less clock pulses) during transmission	= True
			OR
			No or wrong fault response from ASIC while reading a register with a clock	= True
		This monitoring checks the SPI communication between ASIC and the microcontroller at software state Init.	Length of received data differs from sent data	= True	Ignition key	= On	0.1 [s]	Once	N-Trip	Not feasible - waiver requested
			OR		AND
			Calculated parity bit differs from received parity bit	= True	ECU initialization running	= True
			OR
			Transmitted bit differs from bit in register	= True
			OR
			Error frame is transmitted	= True
		This monitoring checks if the ASIC has detected an internal failure.	Charge-pump failure bit is set	= True	Ignition key	= On	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR
			Clock-input-signal failure bit is set	= True
			OR
			Internal-oscillator-circuit failure bit is set	= True
		This monitoring checks the voltage comparators of the ASIC.	Voltage comparator test error flag set	= True	System voltage	> 6.9 [V]	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks for a time out in SPI communication.	Duration of data transfer to ASIC	> 0.01 [s]	System voltage	> 6.9 [V]	0.5 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks the SPI communication between the ASIC and the microcontroller during the Running state of the software.	Length of received data differs from sent data	= True	Ignition key	= On	0.5 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR
			Calculated parity bit differs from received parity bit	= True
			OR
			Transmitted bit differs from bit in register	= True
			OR
			Error frame is transmitted	= True
		This monitoring checks if there is an overload situation on the motor relay during actuation.	| Return Flow Pump relay drain voltage - Return Flow Pump relay source voltage |	< 2.5 [V]	Ignition key	= On	0.06 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Return Flow Pump	= On
		This monitoring checks for proper pull-up resistor functionality.	MRPU pin status	<> Selected switch state	Ignition key	= On	0.5 [s]	Once	N-Trip	Not feasible - waiver requested
					AND
					Return Flow Pump	= Off
		This monitoring checks if the return flow pump has an electrical fault.	Voltage at analog feedback line (Difference between the MOSFET Drain and the source voltages of the motor relay)	> 1.4 [V]	Ignition key	= On	0.06 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Return Flow Pump is in standstill state	= True
		This monitoring checks for correct internal ADC functionality.	Return Flow Pump voltage read by ADC (analog) / Return Flow Pump voltage calculated by ASIC (digital)	> 0.25	Ignition key	= On	0.04 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Return Flow Pump	= On
		This monitoring checks if the motor voltage is incorrect.	Motor relay supply line voltage read by ADC (analog) / Motor relay supply line voltage calculated by ASIC (digital)	> 0.25	Ignition key	= On	100 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Return Flow Pump	= Off
This monitoring checks if the hardware components are supported by the software.	Device ID of ASIC is not in the list of supported device Ids	= True	Ignition key	= On	0.6 [s]	Once	N-Trip	Not feasible - waiver requested
	OR
	Software version ID of ASIC is not in the list of supported software version IDs	= True
	OR
	Microcontroller device ID is not in the list of supported device IDs	= True
	OR
	Microcontroller software version ID is not in the list of supported SW-	= True
This monitoring checks if the voltage pre-regulator mode in ASIC does fit to the flashed SW configuration.	Voltage pre-regulator mode failure bit is set	= True	Ignition key	= On	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
This monitoring checks if wheel speed signals are correct during internal transmission.	Wheel speed signals and the multiplexed wheel speed signals are not identical	= True	System voltage	> 6.9 [V]	0.3 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			WSS Test finished	= True
This monitoring checks if there is a hardware defect in WSS System Line.	WSS supply line failure is detected	= True	System voltage	> 6.9 [V]	0.015 [s]	Once	N-Trip	Not feasible - waiver requested
P060B	This monitoring checks if ADC conversion time is too long.	Number of conversions which could not be finished in time	> 9	Ignition key	= On	0.003 [s]	Continuous	N-Trip	Not feasible - waiver requested
	This monitoring checks for proper ADC self-test functionality.	| Difference between the two ADC measurements per channel |	> 540 [digits]	Ignition key	= On	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
	This monitoring checks if the reference voltage of the ADC is in range.	ADC reference voltage	< 1.145 [V]	Ignition key	= On	0.02 [s]	Continuous	N-Trip	Not feasible - waiver requested
		OR
		ADC reference voltage	> 1.345 [V]
P0610	This monitoring checks if the because Production mode is activated and Post Run Monitoring is suppressed. When Production mode is activated the Post Run Monitoring is suppressed, or if it was logged before the it is reset.	Multiple Cycles Without Complete Postrun is suppressed as Production mode is activated.	= True	BSCM State	= Diag	0.02 [s]	continuous	1-Trip	Feasible	software control strategy
	This monitoring checks if the Functionality deactivation of Pump Test of the vehicle production mode (Vehicle Mode P) is activated by a customer diagnosis.	Production mode is active via Adaptation Channel using Customer Diagnosis	= True	BSCM State	= Running	0.02 [s]	continuous	1-Trip	Feasible	software control strategy
	This monitoring checks if the vehicle production mode (Vehicle Mode P) is activated.	Production mode is active	= True	Ignition key	= On	0.02 [s]	Continuous	1-Trip	Feasible	software control strategy
				AND
				Engine rpm	= 0 [rpm]
				AND
				Mileage value	< 62.14 [miles]
				AND
				Vehicle speed	< 3.1 [mph]
P062F	This monitoring checks if the customer ID is correct.	Stored customer ID differs from expected customer ID	= True	System voltage	> 6.9 [V]	0.1 [s]	Once	1-Trip	Not feasible - waiver requested
	This monitoring checks if the PSW end marker is valid.	EEPROM File system version matches with the SW	= True	System voltage	> 6.9 [V]	0.1 [s]	Once	1-Trip	Not feasible - waiver requested
	This monitoring checks if there is enough available space in the EEPROM to allocate a PDM data field.	Available space in EEPROM not enough	= True	System voltage	> 6.9 [V]	0.1 [s]	Once	1-Trip	Not feasible - waiver requested
	This monitoring checks if the stored data field size in EEPROM is correct.	EEPROM data field size stored is incorrect	= True	Ignition key	= On	0.1 [s]	Once	1-Trip	Not feasible - waiver requested
	This monitoring checks EEPROM reading accessibility.	PDM flag set	= True	System voltage	> 6.9 [V]	0.1 [s]	Once	1-Trip	Not feasible - waiver requested
	This monitoring checks if there is a permanent writing of the NVM.	Number of occurrences, when the time between 2 successive NVM writings is too short	> 100	Ignition key	= On	0.01 [s]	Continuous	1-Trip	Not feasible - waiver requested
	This monitoring checks if the Return Flow Pump relevant EEPROM memory is readable or if the Return Flow Pump relevant EEPROM content is valid.	EEPROM data cannot be read	= True	Ignition key	= On	0.1 [s]	Once	N-Trip	Not feasible - waiver requested
		OR
		EEPROM data is valid	= False
	This monitoring checks if EEPROM access is possible.	Cannot load the reference resistor value stored in the EEPROM	= True	Ignition key	= On	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
				AND
				Resistor Measurement Test is active	= True
	This monitoring checks if during the configuration check the Persistent Data Management (PDM) could not be read.	PDM could not be read	= True	System on start up state	= True	0.02 [s]	Once	N-Trip	Not feasible - waiver requested
				AND
				Vehicle configuration check is active	= True
P0857	This monitoring checks if the engine follow Traction Control System (TCS) request properly.	Engine torque different than the torque asked by the TCS	= True	Ignition key	= On	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
U0401	This monitoring checks the consistency of the Vehicle OBD Type information received in Motor_Code_01 PDU sent by the engine ECU.	The received Vehicle OBD Type information is not consistent	= = True	BSCM State	= Running	0.02 [s]	continuous	1-Trip	Feasible	external signal modification box
				AND
				Motor Start System information received	= True
	This monitoring checks the consistency of the Motor Start System information received in Motor_31 PDU sent by the engine ECU.	The received Vehicle Motor Start System information is not consistent	= = True	BSCM State	= Running	0.02 [s]	continuous	1-Trip	Feasible	external signal modification box
	This monitoring checks if the Motor_Code_01 PDU is consecutively received from the network.	The received Vehicle OBD Type information is not consistent	= True	BSCM State	= Running	0.02 [s]	continuous	1-Trip	Feasible	external signal modification box
		OR		AND
		The received Vehicle Hybrid type information is not consistent	= True	Motor Start System information NOT received	= True
U1013	This monitoring checks if during the configuration check the Persistent Data Management (PDM) is empty.	PDM is empty	= True	Ignition key	= On	0.02 [s]	Once	N-Trip	Not feasible - waiver requested
				AND
				Vehicle configuration check is active	= True
	This monitoring checks if during the configuration check the init values are available in the Persistent Data Management (PDM) instead of valid variant data.	Init values are available in the PDM	= True	Ignition key	= On	0.02 [s]	Once	N-Trip	Not feasible - waiver requested
				AND
				Vehicle configuration check is active	= True
U1014	This monitoring checks the correctness of the OBD coding when the ECU is coded as "US OBD"	Vehicle OBD configuration and ECU configuration do not match	= True	BSCM State	= Running	0.02 [s]	continuous	1-Trip	Feasible	external signal modification box
	This monitoring checks if Powertrain type in PDM	Powertrain type in PDM and NET Powertrain type are not equal	= True	BSCM State	= Running	0.02 [s]	continuous	1-Trip	Feasible	external signal modification box

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
		and NET Powertrain type are the same			AND	= True
					Bus communication active
		This monitoring checks the correctness of the OBD coding when the ECU is coded as "No OBD"	Vehicle OBD configuration and ECU configuration do not match	= True	BSCM State	= Running	0.02 [s]	continuous	1-Trip	Feasible	external signal modification box
		This monitoring checks if there is variant inconsistency.	EEPROM variant	<> SW-stored variant	Ignition key	= On	0.02 [s]	Once	N-Trip	Not feasible - waiver requested
		This monitoring checks if the ADS and the INL is coded off and the SCU_01 PDU is received.	ADS is coded off	= True	BSCM State	= Pre-Run	0.02 [s]	once	N-Trip	Feasible	external signal modification box
			AND		AND
			INL is coded off	= True	Bus communication is active	= True
			AND
			SCU_01 PDU received	= True
		This monitoring checks for inconsistencies between variant coding of DSR (Steering angle assistance) and received request information from the network.	DSR Protocols Datas Units are received	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Feasible	external signal modification box
					AND
					DSR configurated Off	= True
		This monitoring checks if the functions eAWS and eABC are correctly configured.	eAWS and eABC are coded on at the same time	= True	BSCM State	= Running	0.02 [s]	continuous	N-Trip	Feasible	external signal modification box
			OR		AND
			eAWS and eABC are coded off at the same time	= True	Bus communication is active	= True
			OR
			PDU_AFR01 is received in network	= True
		This monitoring checks if HAL and INL is coded off and HAL_01 PDU is received.	HAL is coded off	= True	BSCM State	= Running	0.02 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND		AND
			INL is coded off	= True	Bus communication is active	= True
			AND
			HAL_01 PDU received	= True
		This monitoring checks if HAL and INL or ADS and INL is coded on.	(HAL is coded on	= True	BSCM State	= Running	0.02 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND
			INL is coded on)	= True
			OR
			(ADS is coded on	= True
			AND
			INL is coded on)	= True
		This monitoring checks the inconsistence between the valid variants within the SW and the variant that was written to EEPROM.	Invalid variant was written to EEPROM	= True	Ignition key	= On	0.02 [s]	Once	N-Trip	Not feasible - waiver requested
					AND
					Vehicle configuration check is active	= True
	U3001	This monitoring checks if the post-run was completely done in the previous driving cycles. In a dedicated EEPROM item the successful post- run status is stored at the end of the post-run. If the post-run was unsuccessful, then at the beginning of the next driving cycle a counter is incremented, and the value immediately saved in EEPROM (in case of a successfully completed post-run, the counter is set back to zero). However, the failure is set only if there is OBD relevant failure stored in the Failure Memory.	The post-run did not finish completely for a defined number of consecutive times	> 4 times	BSCM State	= Init or Running	0.02 [s]	Once	1-Trip	Feasible	break out box
			AND
			there is an OBD relevant failure stored in the Failure Memory	= True
	U3510	This monitoring checks if an ESC (Electronic Stability Control) dataset is present in the ECU (Electronic Control Unit) or if no ESC dataset was programmed yet.	ESC dataset is empty	= True	Ignition key	= On	0.02 [s]	Once	N-Trip	Feasible	software control strategy
					AND
					Init phase	= Running
Hydraulic Pump	C0020	This monitoring checks if the calibration of ADC in the ASIC is successfully done.	Raw generated voltage (at 0V)	> 0.14 [V]	Ignition key	= On	3 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
					AND
					Hydraulic pump motor	= Off
		This monitoring checks the functionality of the Return Flow Pump path.	Voltage drops at hydraulic pump motor relay	< 2 [V]	System voltage	> 6.9 [V]	5 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Hydraulic pump motor	= Off
					AND
					Motor relay switched on	= True
		This monitoring checks if there is an open line on the Return Flow Pump supply or a motor relay short-circuit failure outside of motor actuation.	Return Flow Pump supply voltage	> 4 [V]	Ignition key	= On	1 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Return Flow Pump	= Off
		This monitoring checks if the resistance in the internal valve supply voltage line is faulty or too high by checking the voltage.	Internal valve supply voltage / System voltage	> 0.25	Ignition key	= On	1 [s]	Once	N-Trip	Feasible	break out box
					AND
					Vehicle speed	> 9.32 [mph]
	C052F	This monitoring checks if an interruption of the motor relay voltage supply line has occurred.	Deviation between motor relay supply voltage and motor supply voltage	> 40 [%]	Ignition key	= On	0.1 [s]	Continuous	N-Trip	Feasible	break out box
	C055B	This monitoring checks if the return pump is weak due to a heavy load.	Calculated generator voltage	> 0.4 [V]	System voltage	> 6.9 [V]	0.48 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			Measured generator voltage	< 0.4 [V]	Return-Flow pump motor is running	= True
		This monitoring checks if there is a possible in line resistor or under voltage situation in the motor relay supply.	Motor relay supply voltage / motor supply voltage	> 40 [%]	Ignition key	= On	0.01 [s]	Every 10 [ms]	N-Trip	Feasible	break out box
					AND
					Return-Flow pump motor is running	= True
		This monitoring checks if there are failures on the motor supply line.	Deviation between motor relay voltage / internal supply voltage and motor supply voltage	> 40 [%]	Ignition key	= On	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Return-Flow pump motor is running	= True
		This monitoring checks if the Return Flow Pump can be actuated and if the generated motor voltage is visible to the microcontroller.	Analog pump motor voltage	< 1.7 [V]	Ignition key	= On	5 [s]	Once	N-Trip	Not feasible - waiver requested
			OR		AND
			Digital pump motor voltage	< 1.7 [V]	Hydraulic pump motor	= Off
					AND
					Vehicle speed	> 23.61 [mph]
		This monitoring checks if there is an under voltage of the ASIC internal Sigma Delta Modulator.	Sigma delta converter supply voltage	< 7.5 [V]	Ignition key	= On	1.005 [s]	Continuous	N-Trip	Not feasible - waiver requested
	P0634	This monitoring checks the actuation time of the Return Flow Pump during diagnosis, as it could be damaged due to overheating.	Actuation time of the Return Flow Pump	> 30 [s]	Ignition key	= On	30 [s]	Continuous during diagnostic session	N-Trip	Not feasible - waiver requested
					AND
					Return Flow Pump is actuated	= True
		This monitoring checks if the valve is activated properly.	Inlet valve activation time	> 120 [s]	Ignition key	= On	120 [s]	Continuous during diagnostic session	N-Trip	Not feasible - waiver requested
					AND
					Valve is actuated	= True
			Outlet valve activation time	> 30 [s]	Ignition key	= On	30 [s]
					AND
					Valve is actuated	= True
Hydraulic Valve	C053B	This monitoring checks if an interruption of the valve relay voltage supply line has occurred.	Valve supply line voltage	< 2.6 [V]	Ignition key	= On	0.1 [s]	Every 20 [ms]	N-Trip	Feasible	break out box
					AND
					Valve relay supply voltage	> 6.9 [V]
	C062D	This monitoring checks if the Outlet Valve Front Left has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure during valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR		AND
			Over Current is detected	= True	Valve actuation is active	= True
			OR
			Over Temperature is detected	= True
			OR
			Power Ground Lost is detected	= True
			OR
			Free Wheeling Lost is detected	= True
		This monitoring checks if the current through Outlet Valve Front Left is too high or too low.	(Current through the valve	> 0.12 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Current through the valve)	< 0.085 [A]	Valve relay supply voltage	> 6.9 [V]
			AND
			The number of consecutively detected too high or too low current value)	>= 6
		This monitoring checks if PWM (Pulse Width Modulation) deviation at Outlet Valve Front Left is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
			AND
			The number of time when the measured actuation duty is consequently out	> 5
		This monitoring checks if the transistor gate of Outlet Valve Front Left is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
		This monitoring checks the deviation between the measured valve resistance of Outlet Valve Front Left and the defined valve resistance in the	Difference between the measured valve resistance and the defined valve resistance in the software	< 4.61 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
		software.	Difference between the measured valve resistance and the defined valve resistance in the software	> 14.53 [Ohm]	Valve relay supply voltage	> 6.9 [V]
					AND
					Resistor Measurement Test is active	= True
		This monitoring checks cyclically if the Outlet Valve Front Left has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR		AND
			Over Current is detected	= True	No Valve actuation	= True
			OR		AND
			Over Temperature is detected	= True	Silent Valve Driver Test	= On
			OR
			Power Ground Lost is detected	= True
			OR
			Free Wheeling Lost is detected	= True
		This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Outlet Valve Front Left.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Valve Actuation Register Test is running	= True
		This monitoring checks if the Outlet Valve Front Right has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure during valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR		AND
			Over Current is detected	= True	Valve actuation is active	= True
			OR
			Over Temperature is detected	= True
			OR
			Power Ground Lost is detected	= True
			OR
			Free Wheeling Lost is detected	= True
		This monitoring checks if the current through Outlet Valve Front Right is too high or too low.	(Current through the valve	> 0.12 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Current through the valve)	< 0.085 [A]	Valve relay supply voltage	> 6.9 [V]
			AND
			The number of consecutively detected too high or too low current value)	>= 6
		This monitoring checks if PWM (Pulse Width Modulation) deviation at Outlet Valve Front Right is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
			AND
			The number of time when the measured actuation duty is consequently out	> 5
		This monitoring checks if the transistor gate of Outlet Valve Front Right is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
		This monitoring checks the deviation between the measured valve resistance of Outlet Valve Front Right and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	< 4.61 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Difference between the measured valve resistance and the defined valve resistance in the software	> 14.53 [Ohm]	Valve relay supply voltage	> 6.9 [V]
					AND
					Resistor Measurement Test is active	= True
		This monitoring checks cyclically if the Outlet Valve Front Right has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR		AND
			Over Current is detected	= True	No Valve actuation	= True
			OR		AND
			Over Temperature is detected	= True	Silent Valve Driver Test	= On
			OR
			Power Ground Lost is detected	= True
			OR
			Free Wheeling Lost is detected	= True
		This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Outlet Valve Front Right.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Valve Actuation Register Test is running	= True
This monitoring checks if the Outlet Valve Rear Left has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure during valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	Valve actuation is active	= True
	OR
	Over Temperature is detected	= True
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the current through Outlet Valve Rear Left is too high or too low.	(Current through the valve	> 0.12 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Current through the valve)	< 0.085 [A]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of consecutively detected too high or too low current value)	>= 6
This monitoring checks if PWM (Pulse Width Modulation) deviation at Outlet Valve Rear Left is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of time when the measured actuation duty is consequently out	> 5
This monitoring checks if the transistor gate of Outlet Valve Rear Left is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks the deviation between the measured valve resistance of Outlet Valve Rear Left and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	< 4.61 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Difference between the measured valve resistance and the defined valve resistance in the software	> 14.53 [Ohm]	Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks cyclically if the Outlet Valve Rear Left has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	No Valve actuation	= True
	OR		AND
	Over Temperature is detected	= True	Silent Valve Driver Test	= On
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Outlet Valve Rear Left.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Valve Actuation Register Test is running	= True
This monitoring checks if the Outlet Valve Rear Right has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure during valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	Valve actuation is active	= True
	OR
	Over Temperature is detected	= True
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the current through Outlet Valve Rear Right is too high or too low.	(Current through the valve	> 0.12 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Current through the valve)	< 0.085 [A]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of consecutively detected too high or too low current value)	>= 6
This monitoring checks if PWM (Pulse Width Modulation) deviation at Outlet Valve Rear Right is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of time when the measured actuation duty is consequently out	> 5
This monitoring checks if the transistor gate of Outlet Valve Rear Right is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks the deviation between the measured valve resistance of Outlet Valve Rear Right and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	< 4.61 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Difference between the measured valve resistance and the defined valve resistance in the software	> 14.53 [Ohm]	Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks cyclically if the Outlet Valve Rear Right has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	No Valve actuation	= True
	OR		AND
	Over Temperature is detected	= True	Silent Valve Driver Test	= On
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Outlet Valve Rear Right.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Valve Actuation Register Test is running	= True
This monitoring checks if the ASIC Free Wheeling component and the Free Wheeling path for the Inlet Valve Front Left is defective.	Freewheeling cannot be switched on or off.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks if the Inlet Valve Front Left has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure during valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	Valve actuation is active	= True
	OR
	Over Temperature is detected	= True
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the current through Inlet Valve Front Left is too high or too low.	(Current through the valve	> 0.12 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Current through the valve)	< 0.085 [A]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of consecutively detected too high or too low current value)	>= 6
This monitoring checks if PWM (Pulse Width Modulation) deviation at Inlet Valve Front Left is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of time when the measured actuation duty is consequently out	> 5
This monitoring checks if the transistor gate of Inlet Valve Front Left is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks the deviation between the measured valve resistance of Inlet Valve Front Left and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	< 4.57 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Difference between the measured valve resistance and the defined valve resistance in the software	> 14.40 [Ohm]	Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks cyclically if the Inlet Valve Front Left has Open Load, Under Current, Over	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20[s]	N-Trip	Not feasible - waiver requested
	OR		AND

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
		Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR		AND
			Over Current is detected	= True	No Valve actuation	= True
			OR		AND
			Over Temperature is detected	= True	Silent Valve Driver Test	= On
			OR
			Power Ground Lost is detected	= True
			OR
			Free Wheeling Lost is detected	= True
		This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Inlet Valve Front Left.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Valve Actuation Register Test is running	= True
		This monitoring checks if the ASIC Free Wheeling component and the Free Wheeling path for the Inlet Valve Front Right is defective.	Freewheeling cannot be switched on or off.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Resistor Measurement Test is active	= True
		This monitoring checks if the Inlet Valve Front Right has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure during valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR		AND
			Over Current is detected	= True	Valve actuation is active	= True
			OR
			Over Temperature is detected	= True
			OR
			Power Ground Lost is detected	= True
			OR
			Free Wheeling Lost is detected	= True
		This monitoring checks if the current through Inlet Valve Front Right is too high or too low.	(Current through the valve	> 0.12 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Current through the valve)	< 0.085 [A]	Valve relay supply voltage	> 6.9 [V]
			AND
			The number of consecutively detected too high or too low current value)	>= 6
		This monitoring checks if PWM (Pulse Width Modulation) deviation at Inlet Valve Front Right is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
			AND
			The number of time when the measured actuation duty is consequently out	> 5
		This monitoring checks if the transistor gate of Inlet Valve Front Right is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
		This monitoring checks the deviation between the measured valve resistance of Inlet Valve Front Right and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	< 4.57 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Difference between the measured valve resistance and the defined valve resistance in the software	> 14.40 [Ohm]	Valve relay supply voltage	> 6.9 [V]
					AND
					Resistor Measurement Test is active	= True
		This monitoring checks cyclically if the Inlet Valve Front Right has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR		AND
			Over Current is detected	= True	No Valve actuation	= True
			OR		AND
			Over Temperature is detected	= True	Silent Valve Driver Test	= On
			OR
			Power Ground Lost is detected	= True
			OR
			Free Wheeling Lost is detected	= True
		This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Inlet Valve Front Right.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Valve Actuation Register Test is running	= True
This monitoring checks if the ASIC Free Wheeling component and the Free Wheeling path for the Inlet Valve Rear Left is defective.	Freewheeling cannot be switched on or off.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks if the Inlet Valve Rear Left has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure during valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	Valve actuation is active	= True
	OR
	Over Temperature is detected	= True
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the current through Inlet Valve Rear Left is too high or too low.	(Current through the valve	> 0.12 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Current through the valve)	< 0.085 [A]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of consecutively detected too high or too low current value)	>= 6
This monitoring checks if PWM (Pulse Width Modulation) deviation at Inlet Valve Rear Left is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of time when the measured actuation duty is consequently out	> 5
This monitoring checks if the transistor gate of Inlet Valve Rear Left is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks the deviation between the measured valve resistance of Inlet Valve Rear Left and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	< 4.57 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Difference between the measured valve resistance and the defined valve resistance in the software	> 14.40 [Ohm]	Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks cyclically if the Inlet Valve Rear Left has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	No Valve actuation	= True
	OR		AND
	Over Temperature is detected	= True	Silent Valve Driver Test	= On
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Inlet Valve Rear Left.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Valve Actuation Register Test is running	= True
This monitoring checks if the ASIC Free Wheeling component and the Free Wheeling path for the Inlet Valve Rear Right is defective.	Freewheeling cannot be switched on or off.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks if the Inlet Valve Rear Right has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure during valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	Valve actuation is active	= True
	OR
	Over Temperature is detected	= True
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the current through Inlet Valve Rear Right is too high or too low.	(Current through the valve	> 0.12 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Current through the valve)	< 0.085 [A]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of consecutively detected too high or too low current value)	>= 6
This monitoring checks if PWM (Pulse Width Modulation) deviation at Inlet Valve Rear Right is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of time when the measured actuation duty is consequently out	> 5
This monitoring checks if the transistor gate of Inlet Valve Rear Right is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks the deviation between the measured valve resistance of Inlet Valve Rear Right and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	< 4.57 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Difference between the measured valve resistance and the defined valve resistance in the software	> 14.40 [Ohm]	Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks cyclically if the Inlet Valve Rear Right has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	No Valve actuation	= True
	OR		AND
	Over Temperature is detected	= True	Silent Valve Driver Test	= On
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Inlet Valve Rear Right.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Valve Actuation Register Test is running	= True
This monitoring checks continuously if the ASIC Free Wheeling component and the Free Wheeling path is defective.	ASIC freewheeling path was activated for longer time than freewheeling time	> 0.03 [s]	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks if the ASIC Free Wheeling component and the Free Wheeling path for the High-Pressure Switching Valve 1 is defective.	Freewheeling of valve driver cannot be switched on or off	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks if the High-Pressure Switching Valve 1 has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure during valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	Valve actuation is active	= True
	OR
	Over Temperature is detected	= True
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the current through High- Pressure Switching Valve 1 is too high or too low.	(Current through the valve	> 0.156 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Current through the valve)	< 0.044 [A]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of consecutively detected too high or too low current value)	> 5
This monitoring checks if PWM (Pulse Width Modulation) deviation at High-Pressure Switching Valve 1 is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
	AND

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
			The number of time when the measured actuation duty is consequently out	> 5
		This monitoring checks if the transistor gate of High-Pressure Switching Valve 1 is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
		This monitoring checks the deviation between the measured valve resistance of High-Pressure Switching Valve 1 and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	< 2.12 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Difference between the measured valve resistance and the defined valve resistance in the software	> 7.44 [Ohm]	Valve relay supply voltage	> 6.9 [V]
					AND
					Resistor Measurement Test is active	= True
		This monitoring checks cyclically if the High- Pressure Switching Valve 1 has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR
			Over Current is detected	= True
			OR
			Over Temperature is detected	= True
			OR
			Power Ground Lost is detected	= True
			OR
			Free Wheeling Lost is detected	= True
		This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of High-Pressure Switching Valve 1.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Valve Actuation Register Test is running	= True
		This monitoring checks if the Valve-Driver-ASIC Free Wheeling component and the Free Wheeling path for the High-Pressure Switching Valve 2 is defective.	Freewheeling of valve driver cannot be switched on or off	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Resistor Measurement Test is active	= True
		This monitoring checks if the High-Pressure Switching Valve 2 has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure if there is valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR		AND
			Over Current is detected	= True	Valve actuation is active	= True
			OR
			Over Temperature is detected	= True
			OR
			Power Ground Lost is detected	= True
			OR
			Free Wheeling Lost is detected	= True
		This monitoring checks if the current through High- Pressure Switching Valve 2 is too high or too low.	(Current through the valve	> 0.156 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Current through the valve)	< 0.044 [A]	Valve relay supply voltage	> 6.9 [V]
			AND
			The number of consequently detected too high or too low current value)	> 5
		This monitoring checks if PWM (Pulse Width Modulation) deviation at High-Pressure Switching Valve 2 is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
			AND
			The number of time when the measured actuation duty is consequently out	> 5
		This monitoring checks if the transistor gate of High-Pressure Switching Valve 2 is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
		This monitoring checks the deviation between the measured valve resistance of High-Pressure Switching Valve2 and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	> 2.12 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
					Valve relay supply voltage	> 6.9 [V]
					AND
			Difference between the measured valve resistance and the defined valve resistance in the software	< 7.44 [Ohm]	Resistor Measurement Test is active	= True
		This monitoring checks cyclically if the High- Pressure Switching Valve 2 has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR
			Over Current is detected	= True
OR
Over Temperature is detected	= True
OR
Power Ground Lost is detected	= True
OR
Free Wheeling Lost is detected	= True
This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Inlet Valve High-Pressure Switching Valve 2.	The comparison between valve-driver actuation value written in ASIC register and the valve-driver actuation feedback value are not equal	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Valve Actuation Register Test is running	= True
This monitoring checks all 12 valves if there is a Pulse Width Modulation (PWM) failure.	Pulse width modulation check sequence is not completed during the running period of Valve Actuation Register Test	= True	Ignition key	= On	0.005 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks all 12 valves if the Silent Valve Driver Test (SVDT) are completed.	Feedback of a successful finished Silent Valve Driver Test via SPI-bus has not been received	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			No Valve actuation	= True
			AND
			Silent Valve Driver Test	= On
This monitoring checks if the ASIC Free Wheeling component and the Free Wheeling path for the Switch over Valve 1 is defective.	Freewheeling cannot be switched on or off.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks the Switch over Valve 1 has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure during valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	Valve actuation is active	= True
	OR
	Over Temperature is detected	= True
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the current through Switch over Valve 1 is too high or too low.	(Current through the valve	> 0.128 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Current through the valve)	< 0.072 [A]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of consecutively detected too high or too low current value)	> 5
This monitoring checks if PWM (Pulse Width Modulation) deviation at Switch over Valve 1 is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
	AND
	The number of times when the measured actuation duty is consecutively	> 5
This monitoring checks if the transistor gate of Switch over Valve 1 is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks the deviation between the measured valve resistance of Switch over Valve 1 and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	< 4.59 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Difference between the measured valve resistance and the defined valve resistance in the software	> 14.59 [Ohm]	Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks cyclically if the Switch over Valve 1 has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	No Valve actuation	= True
	OR		AND
	Over Temperature is detected	= True	Silent Valve Driver Test	= On
	OR
	Power Ground Lost is detected	= True
	OR
	Free Wheeling Lost is detected	= True
This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Switch over Valve 1.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Valve Actuation Register Test is running	= True
This monitoring checks the aging of the valve by measuring the current drift.	Case 1 (during 20% valve actuation): Measured mean valve current	< 0.4 [A]	Case 1: Ignition key	= On	0.025 [s]	Once	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Vehicle speed	> 9.32 [mph]
	Case 2 (during 30% valve actuation): Measured mean valve current	< 0.6 [A]	Case 2: Ignition key	= On
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Vehicle speed	> 9.32 [mph]
	Case 3 (during 44% valve actuation): Measured mean valve current	< 0.8 [A]	Case 3: Ignition key	= On
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Vehicle speed	> 9.32 [mph]
			AND
	Case 4 (during 67% valve actuation): Measured mean valve current	< 1.36 [A]	Case 4: Ignition key	= On
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Vehicle speed	> 9.32 [mph]
This monitoring checks if the Valve-Driver-ASIC Free Wheeling component and the Free Wheeling path for the Switch over Valve 2 is defective.	Freewheeling of valve driver cannot be switched on or off	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
			AND
			Resistor Measurement Test is active	= True
This monitoring checks if the Switch over Valve 2 has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, Free Wheeling Lost failure if there is valve actuation.	Open Load is detected	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
	OR		AND
	Over Current is detected	= True	Valve actuation is active	= True
	OR
	Over Temperature is detected	= True
	OR
	Power Ground Lost is detected	= True
	OR

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
			Free Wheeling Lost is detected	= True
		This monitoring checks if the current through Switch over Valve 2 is too high or too low.	(Current through the valve	> 0.128 [A]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Current through the valve)	< 0.072 [A]	Valve relay supply voltage	> 6.9 [V]
			AND
			The number of consecutively detected too high or too low current value)	> 5
		This monitoring checks if PWM (Pulse Width Modulation) deviation at Switch over Valve 2 is detected.	(Measured actuation duty	< Set Actuation Duty - 20 [%]	Ignition key	= On	0.05 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Measured actuation duty)	> Set Actuation Duty + 20 [%]	Valve relay supply voltage	> 6.9 [V]
			AND
			The number of times when the measured actuation duty is consecutively	> 5
		This monitoring checks if the transistor gate of Switch over Valve 2 is set properly.	Actual Qx value does not match the expected Qx value	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
		This monitoring checks the deviation between the measured valve resistance of Switch over Valve 1 and the defined valve resistance in the software.	Difference between the measured valve resistance and the defined valve resistance in the software	> 4.59 [Ohm]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Difference between the measured valve resistance and the defined valve resistance in the software	< 14.59 [Ohm]	Valve relay supply voltage	> 6.9 [V]
					AND
					Resistor Measurement Test is active	= True
		This monitoring checks cyclically if the Switch over Valve 2 has Open Load, Under Current, Over Current, Over Temperature, Power Ground Lost, and Free Wheeling Lost failure.	Open Load is detected	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Under Current is detected	= True	Valve relay supply voltage	> 6.9 [V]
			OR		AND
			Over Current is detected	= True	No Valve actuation	= True
			OR		AND
			Over Temperature is detected	= True	Silent Valve Driver Test	= On
			OR
			Power Ground Lost is detected	= True
			OR
			Free Wheeling Lost is detected	= True
		This monitoring checks if the internal valve-driver actuation value written in ASIC register matches to the valve-driver actuation feedback value during the Valve Actuation Register Test (VART) in case of Switch over Valve 1.	The Valve-driver actuation value written in ASIC's register and the Valve- driver actuation feedback value are not equal.	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Valve Actuation Register Test is running	= True
		This monitoring checks the aging of the valve by measuring the current drift.	Case 1 (during 20% valve actuation): Measured mean valve current	< 0.4 [A]	Case 1: Ignition key	= On	0.025 [s]	Once	2-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Vehicle speed	> 9.32 [mph]
			Case 2 (during 30% valve actuation): Measured mean valve current	< 0.6 [A]	Case 2: Ignition key	= On	0.025 [s]
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Vehicle speed	> 9.32 [mph]
			Case 3 (during 44% valve actuation): Measured mean valve current	< 0.8 [A]	Case 3: Ignition key	= On	0.025 [s]
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Vehicle speed	> 9.32 [mph]
			Case 4 (during 67% valve actuation): Measured mean valve current	< 1.36 [A]	Case 4: Ignition key	= On	0.025 [s]
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					Vehicle speed	> 9.32 [mph]
		This monitoring checks if the VART (Valve Activation Register Test) detects an error.	The ASIC feedback of VART detects crosstalk or stuck error	= True	Ignition key	= On	140 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Valve relay supply voltage	> 6.9 [V]
					AND
					No Valve actuation	= True
		This monitoring checks the correct ASIC internal test voltage.	ASIC internal test voltage / valve relay voltage	> 0.55	Ignition key	= On	120 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			ASIC internal test voltage / valve relay voltage	< 0.45	Valve relay supply voltage	> 6.9 [V]
		This monitoring checks the difference between the valve relay output voltage read by the ASIC and the valve relay output voltage read by the ADC.	| measured ASIC voltage - read ADC voltage |	> 1.2 [V]	Ignition key	= On	0.03 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
AND
Valve relay supply voltage	> 6.9 [V]
This monitoring checks if a low ohmic side circuit from the valve voltage to the supply voltage occurs during the resistor measurement.	Valve relay output voltage	> 1.26 [V]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks if a valve relay high ohmic short to ground has occurred by comparing the valve relay output voltage (UVR) to the valve relay supply voltage (UBVR).	(Valve relay output voltage / Valve relay supply voltage) * 100	< 40 [%]	Ignition key	= On	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks if the valve relay is correctly activated by comparing the valve relay output voltage (UVR) to the supply voltage (UBVR) during Fail-Safe Logic Test.	(Valve relay output voltage / Valve relay supply voltage) * 100	< 70 [%]	Ignition key	= On	1 [s]	Once	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks if the valve relay is correctly activated by comparing the valve relay output voltage (UVR) to the supply voltage (UBVR) during Fail-Safe Logic Test.	(Valve relay output voltage / Valve relay supply voltage) * 100	< 70 [%]	Ignition key	= On	0.025 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks if there is a valve relay short to ground by comparing the valve relay output voltage (UVR) to the valve relay supply voltage (UBVR).	(Valve relay output voltage / Valve relay supply voltage) * 100	< 15 [%]	Ignition key	= On	0.04 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Valve relay supply voltage	> 6.9 [V]
This monitoring checks if the valve relay output voltage (UVR) voltage is shorted to the valve relay supply voltage (UBVR), if the valve relay is stuck, or if a missing valve relay watchdog is not detected.	Missing BIST watchdog detected	= True	Ignition key	= On	1 [s]	Once	N-Trip	Not feasible - waiver requested
	OR		AND
	Valve relay safety switch detects a missing valve relay watchdog	= True	Valve relay supply voltage	> 5 [V]
This monitoring checks if the valve relay output voltage (UVR) is shorted to the valve relay supply voltage (UBVR), if the valve relay is stuck continuously, or if a missing valve relay watchdog is not detected.	Missing BIST watchdog detected	= True	System voltage	> 6.9 [V]	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
	OR		AND
	Valve relay safety switch detects a missing valve relay watchdog	= True	Valve relay supply voltage	> 5 [V]
C10CF	This monitoring checks that the valves must not be activated when the hydraulic enable is deactivated.	ASIC feedback Gate ON	= True	Ignition key	= On	0.005 [s]	Once	N-Trip	Not feasible - waiver requested
				AND
				Valve relay supply voltage	> 6.9 [V]
				AND
				Hydraulic enable is deactivated	= True
	This monitoring checks if the reference resistance matches the measured resistance.	The relative deviation between reference resistance stored in the EEPROM and the measured resistance	> 10 [%]	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
				AND
				Valve relay supply voltage	> 6.9 [V]
	This monitoring checks if the configuration of the ASIC is written correctly and has not been changed during runtime.	Read data of the ASIC configuration	<> corresponding configuration	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
				AND
				Valve relay supply voltage	> 6.9 [V]
	This monitoring checks the consistency of the current controller.	The written CRC values are read back inconsistently	= True	Ignition key	= On	0.015 [s]	Cyclically every 20 [s]	N-Trip	Not feasible - waiver requested
		AND		AND
		For a number of times	> 3	Valve relay supply voltage	> 6.9 [V]
	This monitoring checks if the serial high end timer transmission between the microcontroller and the valve-driver has failed.	Wrong protocol	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
		OR		AND
		Timing deviation	= True	Valve relay supply voltage	> 6.9 [V]
		OR
		No data transmission detected	= True
P0562	This monitoring checks for an under voltage condition in the global brake system supply voltage.	Electronic Control Unit supply voltage	< 9.4 [V]	Ignition key	= On	0.02 [s]	Continuous	N-Trip	Feasible	break out box
		OR		AND
		Valve relay supply voltage	< 9.4 [V]	Valve relay supply voltage	> 5 [V]
	This monitoring checks if the supply voltage (UBVR) is too low during evaluation of fail safe logic.	Valve relay supply line voltage	< 5 [V]	Ignition key	= On	0.5 [s]	Once	N-Trip	Not feasible - waiver requested
Inertial Sensor Cluster	C051C	This monitoring checks if the value sent by the longitudinal acceleration sensor is plausible or not.	Absolute value of the longitudinal acceleration	> 15 [m/s^2]	Ignition key	= On	3 [s]	Continuous	N-Trip	Feasible	external signal modification box
		This monitoring checks a longitudinal acceleration offset fault.	Longitudinal acceleration offset	> 2.25	BSCM State	= Running	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			Longitudinal acceleration sensor integration counter which is increased in every 100 m	> 100	Control functions*) are not active	= True
					AND
					Vehicle speed	> 6.7 [mph]
					AND
					Vehicle speed	< 124.15 [mph]
					AND
					Forward driving is detected	= True
		This monitoring checks a lateral acceleration offset fault.	Lateral acceleration offset	> 2.25	(BSCM State	= Running	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					Vehicle speed	> 6.7 [mph]
					AND
					Vehicle speed	< 124.15 [mph]
					AND
					Propulsion system *))	= Active
					OR
					Steep banked curve is not detected)	= True
					OR
					No circular driving detected)	= True

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
		This monitoring checks if the value sent by the lateral acceleration sensor is plausible or not.	Absolute value of the lateral acceleration	> 15 [m/s^2]	Ignition key	= On	0.8 [s]	Continuous	N-Trip	Feasible	external signal modification box
		This monitoring checks if the asynchronous yaw rate sensor sends to the network more or less messages than expected in one FlexRay Cycle / time frame.	Number of yaw rate sensor messages	> 3	System voltage	> 6.9 [V]	1 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR
			Number of yaw rate sensor messages	< 1
	C051F	This monitoring checks if there is a longitudinal acceleration sensor failure due to stuck signal.	Difference between measured Longitudinal acceleration and calculated longitudinal acceleration	> 1.5 [m/s^2]	System voltage	> 6.9 [V]	2 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks if there is an implausible acceleration measured by the sensor.	Difference between measured and offset-compensated longitudinal signal and vehicle acceleration by deriving vehicle velocity	> 3.5 [m/s^2]	Forward driving is detected	= True	4 [s]	continuous	N-Trip	Feasible	external signal modification box
					AND
					Control functions*) are not active	= True
					AND
					Vehicle speed	> 3.35 [mph]
		This monitoring checks if the longitudinal acceleration is higher than a plausible value for a long driving time.	Longitudinal acceleration	> 4 [m/s^2]	(BSCM State	= Running	20 [s]	continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			For time	> 20 [s]	Control functions*) are not active	= True
					AND
					Vehicle velocity	>= 3.36
					AND
					Forward driving is not detected)	= True
					OR
					Brake light Switch failure is detected)	= True
					OR
					Brake Light Switch is not active)	= True
		This monitoring checks if the difference of lateral acceleration sensors 1 and 2 exceeds a specified threshold level for a certain time.	Difference of AYS1 and AYS2 exceeds dynamic threshold level	= True	BSCM State	= Running	0.02 [s]	continuous	N-Trip	Feasible	external signal modification box
					AND
					Driving straight ahead	= True
		This monitoring checks if the value of the lateral acceleration signal value deviation is plausible.	Deviation between model reference value and the measured value	> 22.37 [mph]	BSCM State	= Running	1 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					Measured yaw rate signal received	= True
					AND
					Steering Angle Signal received	= True
					AND
					Wheel Speed Sensor Signals available	= True
					AND
					Lateral Acceleration Signal received	= True
		This monitoring checks if the measured lateral acceleration deviates too much from the calculated value.	Deviation between model reference value and the measured value	> 2.5	BSCM State	= Running	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					Measured yaw rate signal received	= True
					AND
					Steering Angle Signal received	= True
					AND
					Wheel Speed Sensor Signals available	= True
					AND
					Lateral Acceleration Signal received	= True
		This monitoring checks if the lateral acceleration is plausible when the vehicle is in standstill state.	Lateral acceleration	> 7 [m/s^2]	BSCM State	= Running	0.4 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND		AND
			For time	> 0.4 [s]	Vehicle standstill detected	= True
		This monitoring checks if AYS1 sensor is faulty if the Ays_MonRedundancy monitoring is completed and returns a failure value.	Ays_MonRedundancy completed	= True	BSCM State	= Running	60 [s]	continuous	N-Trip	Not feasible - waiver requested
			AND
			Ays_MonRedundancy returns a failure value	= True
			AND
			Ays_MonRedundancy completed	= True
		This monitoring checks if AYS2 sensor is faulty if the Ays_MonRedundancy monitoring is completed and returns a failure value.	Ays_MonRedundancy completed	= True	BSCM State	= Running	60 [s]	continuous	N-Trip	Not feasible - waiver requested
			AND
			Ays_MonRedundancy returns a failure value	= True
			AND
			AYS2 is faulty	= True
		This monitoring checks if the lateral acceleration gain has a fault during the Dynamic Verification of Sensor (DVS) at plant End of Line.	Lateral acceleration integrals deviation	> 40 [%]	Ignition key	= On	0.04 [s]	Continuous during curve driving	N-Trip	Not feasible - waiver requested
					AND
					Steering angle	> 70 [deg]
					AND
					Vehicle standstill detected	= True
					AND
					EOL Dynamic Verification of Sensors	= Activated
		This monitoring checks if the lateral acceleration offset has a fault during the Dynamic Verification of Sensor (DVS) at plant End of Line.	Lateral acceleration offset	> 1.5 [m/s^2]	Ignition key	= On	2 [s]	Continuous during standstill	N-Trip	Not feasible - waiver requested
					AND
Vehicle standstill detected					= True
AND
EOL Dynamic Verification of Sensors					= Activated
This monitoring checks if the yaw rate has a fault during the dynamic verification of sensor at plant End of Line.		Yaw rate deviation	> 25 [%]	Ignition key	= On	0.04 [s]	Continuous during curve driving	N-Trip	Not feasible - waiver requested
	AND
	Steering angle			> 70 [deg]
	AND
	EOL Dynamic Verification of Sensors			= Activated
This monitoring checks if the yaw rate offset has a fault during the dynamic verification of sensor at plant End of Line.	Yaw rate offset	> 2 [deg/s]	Ignition key	= On	2 [s]	Continuous during standstill	N-Trip	Not feasible - waiver requested
			AND
			Vehicle standstill detected	= True
			AND
			EOL Dynamic Verification of Sensors	= Activated
This monitoring checks if the yaw rate fast offset is within range.	Yaw rate offset	> 15 [deg/s]	Driving straight ahead)	= True	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
			AND
			BSCM State)	= Running
This monitoring checks if the yaw rate fast offset is within range.	Yaw rate sensor fast offset	> 7.5 [deg/s]	BSCM State	= Running	0.04 [s]	continuous	N-Trip	Feasible	external signal modification box
This monitoring checks if the yaw rate gain has plausible value.	deviation between measured and calculated yaw rate	> 25 [%]	BSCM State	= Running	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
			AND
			Yaw rate	> 10 [deg/s]
This monitoring checks if the yaw rate gradient from the sensor is plausible.	Yaw rate signal gradient	> 23 [deg/s] within 0.02 [s] cycles	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Not feasible - waiver requested
This monitoring checks if there is a defective yaw rate sensor.	Absolute value of yaw rate sensor signal	> 94.75 [deg/s]	BSCM State	= Running	0.8 [s]	continuous	N-Trip	Not feasible - waiver requested
			AND
			Stable driving conditions are fulfilled	= True
			AND
			No Backward driving detected	= True
This monitoring checks if there is a plausible yaw rate sensor signal while standstill vehicle.	Absolute value of yaw rate sensor signal	> 30 [deg/s]	BSCM State	= Running	5 [s]	continuous	N-Trip	Not feasible - waiver requested
			AND
			Vehicle standstill detected	= True

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
		This monitoring checks if the difference of yaw rate sensors 1 and 2 exceeds a specified threshold level for a certain time.	Difference of YRS1 and YRS2 exceeds dynamic threshold level	= = True	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks if the Normal yaw rate offset is within range.	Yaw Rate Normal offset *)	> > 7.5 [deg/s]	(Standstill compensation	= True	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
					OR
					Fast offset compensation is completed)	= True
					AND
					(BSCM State	= Running
					AND
					Forward driving is detected	= True
					AND
					Vehicle speed	> 6.71 [mph]
					AND
					Stable driving conditions are fulfilled)	= True
					AND
					Absolute steering angle)	< 60 [deg]
		This monitoring checks if the yaw rate value is plausible or not, if there is no over steering is detected.	Deviation between measured and calculated yaw-rate	> > 3 deg/s	(Standstill compensation	= True	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
					OR
					Fast offset compensation is completed)	= True
					AND
					(BSCM State	= Running
					AND
					Forward driving is detected	= True
					AND
					Vehicle speed	> 13.42 [mph]
					AND
					No detected over steering)	= True
					AND
					Maximum deviation of the model yaw rates)	< 2 [deg/s]
		This monitoring checks the plausibility of Yaw Rate Sensor based on the measured steering angle.	(measured steering angle) - (model calculated value based on yaw rate signal)	> > (10 + 134 [mph] / velocity [mph]) at 134 mph: threshold = 11 deg	BSCM State	= Running	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					Difference between velocity of left and right wheels on front axle	less 0.3 [%]
					AND
					Difference between velocity of left and right wheels on rear axle	less 0.3 [%]
					AND
					Lateral acceleration	< 3 [m/s^2]
					AND
					Yaw rate	< 0.5 [deg/s]
		This monitoring checks if the yaw rate value is plausible or not during stable driving, and if the control functions are not active.	Deviation between measured and calculated yaw-rate exceeds the modeled dynamic threshold	= True	(Standstill compensation	= True	1.6 [s]	continuous	N-Trip	Not feasible - waiver requested
					OR
					Fast offset compensation is completed)	= True
					AND
					(BSCM State	= Running
					AND
					Forward driving is detected	= True
					AND
					Vehicle speed	> 6.71 [mph]
					AND
					Stable driving conditions are fulfilled)	= True
					AND
					((absolute) calculated yaw rate	< 55 [deg/s]
					OR
					(absolute) lateral acceleration	< 3 [m/s^2]
					OR
					(absolute) steering angle	= 360 [deg]
					OR
					Control functions*) are not active	= True
					OR
					Brake pressure)	> 50 [bar]
		This monitoring checks if the sign of the yaw rate signal is correct.	Measured yaw rate and the model yaw rate have not the same sign	= True	Ignition key	= On	0.04 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Forward driving is detected	= True
		This monitoring checks if offset at standstill is within range.	Offset	> > 5.25 [deg/s]	BSCM State	= Running	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					Vehicle standstill detected	= True
		This monitoring checks if YRS1 sensor is faulty if the Yrs_MonRedundancy_slow monitoring is completed and returns a failure value.	Yrs_MonRedundancy_slow completed	= True	BSCM State	= Running	60 [s]	continuous	N-Trip	Not feasible - waiver requested
AND
Yrs_MonRedundancy_slow returns a failure value	= True
AND
YRS1 is faulty	= True
This monitoring checks if YRS2 sensor is faulty if the Yrs_MonRedundancy_slow monitoring is completed and returns a failure value.	Yrs_MonRedundancy_slow completed	= True	BSCM State	= Running	60 [s]	continuous	N-Trip	Not feasible - waiver requested
	AND
	Yrs_MonRedundancy_slow returns a failure value	= True
	AND
	YRS2 is faulty	= True
This monitoring checks if there is a yaw rate offset is not within range.	YRS2 offset value	> 5.25 [deg/s]	BSCM State	= Running	0.02 [s]	continuous	N-Trip	Not feasible - waiver requested
Logic Voltage Sensor	P0607	This monitoring checks if the ECU Logic Voltage Sensor is out of range low.	Supply Voltage of ECU	< 4.9 [V]	Ignition key	= On	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
Pressure Sensor	C053D	This monitoring checks if the offset compensation of the pressure sensor is out of range.	Pressure sensor offset	> 15 [bar]	System voltage	> 6.9 [V]	0.02 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Pressure sensor offset	< -15 [bar]	No Brake pedal is pushed	= True
					AND
					Acceleration pedal is pushed	= True
					AND
					Vehicle speed	> 1.12 [mph]
	C0541	This monitoring checks if the offset compensation of the pressure sensor Front Right is out of range.	Measured pressure	> 11 [bar]	Ignition key	= On	0.02 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			Measured pressure	< -15 [bar]	No Brake pedal is pushed	= True
					AND
					Acceleration pedal is pushed	= True
					AND
					Vehicle speed	> 1.12 [mph]
	C055F	This monitoring checks if the Front Right Pressure Sensor is functioning as expected.	Pressure sensor test pulse voltage	> 110 [%]	Vehicle acceleration is not detected	= True	0.005 [s]	Cyclically every 30 [s]	N-Trip	Not feasible - waiver requested
			AND		AND
			Pressure sensor test pulse voltage	< 90 [%]	Actual pressure of Master Cylinder	< 1.5 [bar]
					AND
					Vehicle speed	< 9.32 [mph]
					AND
					Control functions are not active	= True
					AND
					Hydraulic pump motor	= Off
		This monitoring checks if the pressure sensor at the master cylinder is functioning as expected.	Master cylinder pressure sensor test pulse voltage	> 110 [%]	Vehicle acceleration is not detected	= True	0.005 [s]	Cyclically every 30 [s]	N-Trip	Not feasible - waiver requested
			OR		AND
			Master cylinder pressure sensor test pulse voltage	< 90 [%]	Actual pressure of Master Cylinder	< 1.5 [bar]
					AND
					Vehicle speed	< 9.32 [mph]
					AND
					Control functions are not active	= True
					AND
					Hydraulic pump motor	= Off
		This monitoring checks if the pressure sensor has a fault during the Dynamic Verification of Sensor (DVS) at plant End of Line.	Pressure sensor value	> 20 [Bar]	Ignition key	= On	0.04 [s]	Continuous during the dynamic verification of sensor	N-Trip	Not feasible - waiver requested
					AND
					Vehicle speed	> 6.21 [mph]
					AND
					Vehicle standstill detected	= True
					AND
					EOL Dynamic Verification of Sensors	= Activated
		This monitoring checks if there is a short circuit to the supply voltage in the Front Right Wheel Pressure Sensor line.	Signal line voltage	> 3.3 [V]	Ignition key	= On	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks if there is a short circuit to ground or open circuit in the Front Right Wheel Pressure Sensor line.	Signal line voltage	< 0.3 [V]	Ignition key	= On	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks if there is a short circuit between the supply voltage line and the pressure sensor signal line.	Signal line voltage	> 3.3 [V]	Ignition key	= On	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks if there is a short circuit between the ground and the pressure sensor signal line.	Signal line voltage	< 0.3 [V]	Ignition key	= On	0.1 [s]	Continuous	N-Trip	Not feasible - waiver requested
	P05FF	This monitoring checks if the current pressure sensor value is too low for the current pedal travel.	Pressure sensor value	< 4 [Bar]	Ignition key	= On	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND
			Pedal travel	= 23.45 [mm]
		This monitoring checks the plausibility between the pressure sensor values against the pedal travel sensor value.	Pressure sensor value	> 10 [Bar]	Ignition key	= On	0.2 [s]	Continuous	N-Trip	Feasible	external signal modification box
			AND
			Pedal travel	= 0.8 [mm]
Rear Wheel Steering	C0559	This monitoring checks if the signal value of the RWS steering angle signal status is out of a valid range. This monitoring happens when steering systems is	Status of rear wheel steering	= 3 (manuell deaktiviert)	BSCM State	= Running	7 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND
			Speed	> 5 [km/h]
			AND

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
		failed and abnormal steering angle value received.	rear wheel steering angle	> 0.3 [ A °]
	C2007	This monitoring checks if the signal value of the RWS steering angle signal status is out of a valid range. This monitoring happens when steering systems is failed and abnormal steering angle value received.	Status of rear wheel steering	= 1 (Lenkungsausfall)	BSCM State	= Running	7 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND
			Speed	> 5 [km/h]
			AND
			rear wheel steering angle	> 0.3 [ A °]
	U0435	This monitoring checks if the NET signal (Signal_Fahrerwunschwinkel_Soll (Driver request for active steering signal from HAL ECU)) values are consistent.	Signal "Fahrerwunschwinkel_Soll"	= 1023 (error value)	BSCM State	= Running	0.04 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND
			HAL_Status	= normal duty value
		This monitoring checks if the NET signal "Signal_Fahrerwunschwinkel_Soll" (Driver request for active steering signal from HAL ECU) is initialized.	Signal "Fahrerwunschwinkel_Soll"	= 1022 (init value)	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND
			HAL_Status	= normal duty value
		This monitoring checks if the NET signal "Signal_HAL_max_Gradient (Gradient for rear wheel steering angle received from HAL ECU)" has an error value.	Signal "max_Gradient"	= 127 (error value)	BSCM State	= Running	0.04 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND
			HAL_Status	= normal duty value
		This monitoring checks if the NET signal "Signal_HAL_max_Gradient (Gradient for rear wheel steering angle received from HAL ECU)' has an "Init" value.	Signal "max_Gradient"	= 126 (INIT value)	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND
			HAL_Status	= normal duty value
		This monitoring checks if there is a decrease of performance in the electric motor of RWS.This monitoring happens during RWS is in derating situation. In this situation if RWS maximum gradient qualifiers are abnormal or the gradient angle is not in allowable range, then this monitoring sets to invalid.	HAL_Status	= 2 (derating)	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND
			HAL_max_Gradient	> 124
			AND
			Signal status of rear wheel steering "Derating" AND signal status of RWS max. gradient	> 12.5 rad/s with qualifiers of HAL signal being Init or Fail
		This monitoring checks if there is a steering fault or normal duty in case of rear wheel steering under reduced performance conditions.	Signal status "HAL_Status"	= 0 (normal duty) OR 1 (steering fault)	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Feasible	external signal modification box
			AND
			Signal value "HAL_max_Gradient"	< 125 (< normal duty: derating)
Secondary OBD - Power Steering Control Module	C05D6	This monitoring checks Internal hardware checks are implemented to monitor the power stage, SBC, EEPROM, electric motor, torque sensor, position sensor and SPI communication on their correct operating range. If an internal malfunction is detected, a fault code will be stored and the EPS will be set depending on failure in safe mode immediately. The power steering control module processor performance failures are critical internal system failures. The failures cannot be healed by themselves or reset by service 4 request. Replacement of EPS is required.	case 1: power stage functional check: internal check	= failed	(case 1: ignition	= on	2.5 [s]	continuous	N-Trip	Not feasible - waiver requested
			OR		OR
			power stage phase U, V and W short to battery / open circuit: internal check	= Failed	steering assist)	= active
					AND
					supply voltage)	> 6 [V]
			case 2: power stage short to ground / short to battery / open circuit:internal check	= Failed	case 2: steering assist	= active	2.5 [s]
			OR
			power stage sum of phase current U, V and W: absolute value	> 0 [A]
			case 3: electric motor temperature: out of range high	>= 190 [°C]	case 3: ignition	= on	2.5 [s]
			OR		OR
			power stage temperature: out of range high	>= 175 [°C]	steering assist	= active
			OR
			absolute value of electric motor temperature difference between last value vs. actual value	> 15 [°C]
			OR
			absolute value of power stage temperature difference between last value vs. actual value	> 21 [°C]
			OR
			electric motor temperature	<= -43 [°C]
			OR
			power stage temperature: out of range low	<= -43 [°C]
			OR
			difference between electric motor temperature and power stage temperature	< -30; > 80 [°C] [°C]
			OR
			torque sensor signal	= not detected
			OR
			electric motor position sensor: resolver amplitude (sin2 + cos2)	< 0.17; > 2.67 [V2] [V]
			OR
			electric motor position sensor: absolute value of resolver stimulation voltage	< 0.39 [V]
			OR
			internal check of reference voltage at AD-Converters: signal voltage	< 2.443 [V]
			OR
			signal voltage	> 2.548 [V]
			OR
			cross check for fault detection: power stage voltage at AD-Converter 1 (normal) vs. AD-Converter 2 (expanded)	>= 5.24 [%]
			OR
			power stage voltage at AD-Converter 2 (expanded) vs. power stage voltage at SBC	>= 11.5 [%]
			OR
			SPI communication	= failed
			OR
			electric motor position sensor: output voltage	= not plausible
			OR
			software: internal self check	= failed
			case 4: power stage internal logic at wake up	= failure	case 4: ignition	= on	2.5 [s]
			OR
			SBC internal logic at wake up	= failure
			OR
			configuration check at wake up	= failed
			case 5: electric motor position sensor: angular position internal check at wake up	= failed	case 5: ignition	= on	2.5 [s]
			OR		AND
			power stage: initialization phase	= time out	steering assist	= not active
	C12AB	This monitoring checks the measured value of the power stage temperature, modeled value of printed circuit board temperature and measured value of electric motor temperature are evaluated. If an over temperature is detected the control unit of steering control begins to reduce the steering assist. If the steering assist reaches a defined lower limit a temperature malfunction is detected and fault code will be stored and the EPS will be set in safe mode immediately. The temperature model of printed circuit board is based on electrical current measured on electrolytic capacitors and on rod core coil. In addition the measured power stage temperature is used to calculate the printed circuit board temperature.	(power stage: temperature	>= 175 [°C]	ignition	= on	0.115 [s]	continuous	N-Trip	Not feasible - waiver requested
			OR		OR
			printed circuit board: modeled temperature	>= 160 [°C]	steering assist	= active
			OR
			electric motor: temperature)	>= 150 [°C]
			AND
			steering assist)	< 60 [%]
	P0636	This monitoring checks the measurement value of the supply voltage is evaluated. If a voltage malfunction is detected, a fault code will be stored and the EPS will be set in safe mode immediately.	case 1: internal test at ignition on last EPS shutdown	= failed	case 1: FlexRay communication	= synchronous	3 [s]	continuous	N-Trip	Feasible	break out box
					AND
					FlexRay communication	= no fault
					AND
					Vehicle speed	>= 18 [mph]
					AND
					engine cranking	= no active
			case 2: supply voltage	< 10.5 [V]	case 2: ignition	= on	3 [s]
AND
steering assist					= commanded on
(case 3: supply voltage			< 9.2 [V]	(case 3: ignition	= on	3 [s]
AND				AND
steering assist)			< 60 [%]	engine cranking	= not active
OR				AND
supply voltage)			< 5.8 [V]	For time)	>= 5 [s]
				OR
				steering assist)	= active
case 4: supply voltage			< 10.5 [V]	case 4: steering assist	= not active	3 [s]
AND				AND
engine			= cranking	ignition	= on
				AND
				Vehicle speed	>= 7 [mph]
				AND
				Vehicle speed	< 18 [mph]
case 5: supply voltage			< 5.8 [V]	case 5: steering assist	= active	3 [s]
AND				AND
engine			= cranking	ignition	= on
				AND
				Vehicle speed	>= 18 [mph]
P0637	This monitoring checks the measurement value of the supply voltage is evaluated. If a voltage malfunction is detected, a fault code will be stored and the EPS will be set in safe mode immediately.	case 1: supply voltage	> 17 [V]	case 1: ignition)	= on	3 [s]	continuous	N-Trip	Feasible	break out box
		AND		OR
		steering assist	less 60 [%]	(steering assist	= active
				AND
				engine cranking	= not active
				AND
				For time)	= 5 [s]
		case 2: supply voltage	> 17 [V]	case 2: ignition	= on	3 [s]
				AND
				steering assist	= commanded on
U0320	This monitoring checks Internal hardware checks are implemented to monitor the power stage, uC, SBC, and FlexRay transceiver on their right operating range. In addition configuration check is implemented in the monitoring strategy. If an internal malfunction is detected, a fault code will be stored and the EPS will be set depending on failure in safe mode immediately. The software incompatibility with power steering control module failures are non-critical system failures. The failures can be healed by themselves or reset by service 4 request after the repair.	case 1: configuration check received message	= not plausible	case 1: ignition	= on	0.01 [s]	continuous	N-Trip	Not feasible - waiver requested
		OR		OR
		SBC: internal self check	= Failed	steering assist	= active
		OR
		software: internal self check	= Failed
		OR
		μC: internal check at wake up	= Failed
		OR
		power stage: internal check at wake up	= Failed
		OR
		FlexRay transceiver: internal check at wake up	= Failed
		case 2: power stage: internal self check	= Failed	case 2: ignition	= on	0.01 [s]
				AND
				steering assist	= not active
U0419	This monitoring checks if Electric Power Steering and Steering Control Unit are functioning properly and sending the proper failure messages to ESP.	(No failure data is received from EPS	= True	BSCM State	= Running	8 [s]	continuous	N-Trip	Feasible	external signal modification box
		OR		AND
		No failure data is received from SCU)	= True	Bus communication is active	= True
		AND
		(Functional failure from SCU is set	= True
		AND
		The above criteria are met for a defined time interval)	>= 8 [s]
Secondary OBD - Steering Effort Control Module	C0079	This monitoring checks Internal hardware checks are implemented to monitor ECU specific functionalities (i.e. Power Stage driver, ASIC). If a failure is detected, a fault code will be stored and the SCU will be set in safe mode immediately. (SCU is locked reversible)	C0079 - Case 1: measured value of potential difference before/after power stage relay	> 0.6 [V]	case 1: engine speed	= 0 [rpm]	0.12 [s]	continuous	N-Trip	Feasible	break out box
					OR
					ready to drive	= none
			C0079 - Case 2: measured value of potential difference before/after power stage relay	< -1.8 [V]	case 2: engine speed	= 0 [rpm]	0.12 [s]
					OR
					ready to drive	= none
			C0079 - Case 3: measured temperature difference between two temperature sensors	> 30 [K]	case 3: ignition	= none	0.1 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 4: current offsets of motor phases U and W	< 1.506 [V]	case 4: engine speed	= 0 [rpm]	0.01 [s]
			OR		OR
			current offsets of motor phases U and W	< 1.132 [V]	ready to drive	= none
			OR
			current offsets of motor phases U and W	> 1.81 [V]
			OR
			current offsets of motor phases U and W	> 2.206 [V]
			C0079 - Case 5: set or reset of the ASIC ErrorPins	= failed	case 5: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 6: NvRAM	= defective	case 6: ignition	= none	0.001 [s]
			OR		AND
			CRC	= wrong	supply voltage	= none [V]
			OR
			Configuration of NvRAM	= wrong
			C0079 - Case 7: written data to data-flash	= no match to the data in the RAM	case 7: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
			C0079 - Case 8: ASIC	= reports an internal error	case 8: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 9: FET-Treiber	= over temperature	case 9: ignition	= none	0.001 [s]
			OR		AND
			Supply of the power stage driver	= over voltage or under voltage	supply voltage	= none [V]
			OR
			drive voltage on the HS or LS FET	= under voltage
			C0079 - Case 10: power stage	= shut down in error state	case 10: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 11: crc16 error	= occurs in NV-Share Block	case 11: ignition	= none	0.001 [s]
			OR		AND
			length error	= occurs in NV-Share Block	supply voltage	= none [V]
			C0079 - Case 12: SPI commands	= not all SPI commands could be processed by preceded ms task	case 12: ignition	= none	0.01 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 13: SPI	= has a communication error	case 13: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 14: the initialization of power stage driver module	= failed	case 14: ignition	= none	0.01 [s]
			OR		AND
			the switch of the current amplification via SPI	= failed	supply voltage	= none [V]
			C0079 - Case 15: A/D converter	= defective	case 15: ignition	= none	0.01 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 16: Current calculated CRC	= no match to the stored CRC	case 16: ignition	= none	0.001 [s]
			OR		AND
			ROM	= error occurred	supply voltage	= none [V]
			C0079 - Case 17: detected uncorrectable cells by ECC-Correction	> 35 (Threshold f A 1/4 r RAM (40K))	case 17: ignition	= none	0.001 [s]
			OR		AND
			detected uncorrectable cells by ECC-Correction	> 58 (Threshold f A 1/4 r RAM (80K))	supply voltage	= none [V]
			C0079 - Case 18: static configuration register	> changed	case 18: ignition	= none	0.01 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 19: full charge of capacitors power stage	> failed	case 19: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 20: pre-charge of capacitors power stage	= failed	case 20: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 21: discharge of capacitors power stage	= failed	case 21: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 22: "internal supply voltage (U_UBS, CP_MESS, U1V2 andU_REF_COMP) "	> 1.27 [V]	case 22: engine speed	= 0 [rpm]	0.001 [s]
			OR		AND
			"internal supply voltage (U_UBS, CP_MESS, U1V2 and U_REF_COMP) "	< 1.15 [V]	ready to drive	= none
			C0079 - Case 23: system voltage after the relay	> pre-charge system voltage + deviation	case 23: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 24: system voltage after the relay	< pre-charge system voltage - deviation	case 24: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 25: relay	= shutdown is not possible	case 25: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 26: locking control	= shutdown is not possible	case 26: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 27: BIST	= a hw error during the startup detected	case 27: ignition	= none	0.001 [s]
					AND
					supply voltage	= none [V]
			C0079 - Case 28: power stage	= shutdown is not possible	case 28: ignition	= none	0.001 [s]
					AND
supply voltage	= none [V]
C0079 - Case 29: security-relevant processor registers	= not configured as expected	case 29: ignition	= none	0.001 [s]
		AND
		supply voltage	= none [V]
C0079 - Case 30: safety guardian	= a hardware error reported to it	case 30: ignition	= none	0.001 [s]
		AND
		supply voltage	= none [V]
C0079 - Case 31: measured PWM	<> set PWM	case 31: ignition	= none	0.005 [s]
		AND
		supply voltage	= none [V]
C0079 - Case 32: Error Handler	= an error detected in it	case 32: ignition	= none	0.001 [s]
		AND
		supply voltage	= none [V]
C0528	This monitoring checks Steering angle sensor module range and performance are evaluated. If a message-counter error or a signal-not-available error is detected or steering angle is out of range or the signals Signal_LWI_Sub_Daten or Signal LWI_Lenkradwinkel is implausible, a fault code will be stored and the SCU will be set in safe mode immediately. (SCU is locked)	C0528 - Case 1: PDU LWI_01	= received with invalid message counter	case 1: ignition	= received with valid message counter	0.04 [s]	continuous	N-Trip	Feasible	break out box
				AND
				supply voltage	= none [V]
		C0528 - Case 2: PDU LWI_01	= received with invalid signal value	case 2: ignition	= received with valid signal value	0.04 [s]
				AND
				supply voltage	= none [V]
		C0528 - Case 3: Signal_LWI_Sub_Daten	= implausible	case 3: ignition	= corresponds to the specification	0.005 [s]
				AND
				supply voltage	= none [V]
		C0528 - Case 4: Gradient of Signal LWI_Lenkradwinkel	= 2000 [°/s ]	case 4: ignition	= none	0.01 [s]
				AND
				supply voltage	= none [V]
		C0528 - Case 5: Signal LWI_Lenkradwinkel	= implausible	case 5: ignition	= none	0.005 [s]
				AND
				supply voltage	= none [V]
C061D	This monitoring checks the measurement value of current is evaluated and watchdog is monitored. If a current or watchdog malfunction is detected, a fault code will be stored and SCU will be set in safe mode immediately. (SCU is locked)	C061D - Case 1: measured motor current	<> expected motor current	case 1: ignition	= expected motor current	0.001 [s]	continuous	N-Trip	Feasible	break out box
				AND
				supply voltage	= none [V]
		C061D - Case 2: Watchdog opens or closes the phase separator at the right time	= failed	case 2: ignition	= successful	0.001 [s]
				AND
				supply voltage	= none [V]
C061F	This monitoring checks Actuator of active steering is monitored. If an actuator malfunction is detected, a fault code will be stored and SCU will be set in safe mode immediately. (SCU is locked)	C061F - Case 1: estimated in-wire temperature	> 125 [°C]	case 1: engine speed	= 0 [rpm]	0.01 [s]	continuous	N-Trip	Feasible	break out box
				OR
				ready to drive	= none
		C061F - Case 2: estimated in-wire temperature	> 115 [°C]	case 2: engine speed	= 0 [rpm]	0.01 [s]
				OR
				ready to drive	= Terminal 15 Reset
		C061F - Case 3: resistance of motor phase	> 100 [mOhm]	case 3: ignition	< Terminal 15 Reset	0.01 [s]
				AND
				supply voltage	= none [V]
		C061F - Case 4: motor of active steering	= blocked	case 4: engine speed	= 0 [rpm]	0.01 [s]
		AND		AND
		measured intern temperature of motor	> 50 [°C]	ready to drive	= none
		C061F - Case 5: motor of active steering	= blocked	case 5: engine speed	= 0 [rpm]	0.01 [s]
		AND		AND
		measured intern temperature of motor	<= 50 [°C]	ready to drive	= none
		C061F - Case 6: pinion angle	> 500 [°]	case 6: ignition	= Terminal 15 Reset	0.001 [s]
				AND
				supply voltage	= none [V]
		C061F - Case 7: direction of motor rotation	= wrong	case 7: engine speed	= 0 [rpm]	0.001 [s]
		AND		AND
		detection	= via main routine Level 1	ready to drive	= none
		C061F - Case 8: direction of motor rotation	= wrong	case 8: engine speed	= 0 [rpm]	0.001 [s]
		AND		AND
		detection	= via diverse calculation Level 2	ready to drive	= none
		C061F - Case 9: torque on the steering wheel	> 42 [Nm]	case 9: engine speed	= 0 [rpm]	0.005 [s]
		AND		AND
		detection	= in the main path	ready to drive	= none
		C061F - Case 10: torque on the steering wheel	> 42 [Nm]	case 10: engine speed	= 0 [rpm]	0.005 [s]
		AND		AND
		detection	= in the diverse path	ready to drive	= none
		C061F - Case 11: torque on the steering wheel at End-Stop	> 42 [Nm]	case 11: engine speed	= 0 [rpm]	0.005 [s]
		AND		AND
		detection	= in the main path	ready to drive	= none
		C061F - Case 12: torque on the steering wheel at End-Stop	> 42 [Nm]	case 12: engine speed	= 0 [rpm]	0.005 [s]
		AND		AND
		detection	= in the diverse path	ready to drive	= none
C0621	This monitoring checks the lock current is evaluated. If a malfunction is detected, a fault code will be stored and the SCU will be set in safe mode immediately.	C0621 - Case 1: electric current	= 0 [A]	case 1: engine speed	= 0 [rpm]	0.001 [s]	continuous	N-Trip	Feasible	break out box
				OR
				ready to drive	= none
		C0621 - Case 2: safety lock	= shortcut to ground	case 2: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= Terminal 15 Reset
C0622	This monitoring checks the measurement value of voltage at lock is evaluated. If a malfunction is detected, a fault code will be stored and the SCU will be set in safe mode immediately.	C0622 - Case 1: supply voltage	= shortcut	case 1: engine speed	= 0 [rpm]	0.001 [s]	continuous	N-Trip	Not feasible - waiver requested
				OR
				ready to drive	= none
C0623	This monitoring checks Safety mechanism is monitored. If a safety mechanism failure is detected, a fault code will be stored and SCU will be set in safe mode immediately. (SCU is locked)	C0623 - Case 1: motor angle for correct positioning of locking	= too high	case 1: ignition	= system is locked at start-up	0.001 [s]	continuous	N-Trip	Feasible	break out box
		C0623 - Case 2: lock test	= not completed successfully	case 2: engine speed	= 0 [rpm]	6 [s]
				AND
				ready to drive	= none
		C0623 - Case 3: absolute value of calculated motor angle	> 195 [°/s]	case 3: engine speed	= 0 [rpm]	0.001 [s]
				AND
				ready to drive	= none
		C0623 - Case 4: torsion angle	= too high despite activated lock	case 4: engine speed	= 0 [rpm]	0.001 [s]
				AND
				ready to drive	= none
		C0623 - Case 5: deviation of motor position from the position stored on shutdown	= too high	case 5: engine speed	= 0 [rpm]	0.001 [s]
				AND
				ready to drive	= none
		C0623 - Case 6: Pre-Lock Test	= failed	case 6: engine speed	= 0 [rpm]	0.001 [s]
		AND		AND
		locking	= passed	ready to drive	= none
		C0623 - Case 7: Pre-Lock Test	= failed	case 7: engine speed	= 0 [rpm]	0.001 [s]
		AND		AND
		locking	= failed	ready to drive	= none
		C0623 - Case 8: Synchronization of active steering motor at Startup after loss of motor angle	= failed	case 8: ignition	= Terminal 15 Reset	0.001 [s]
				OR
				supply voltage	= none [V]
C0626	This monitoring checks the measurement value of the hall sensors and index values are evaluated. If a malfunction is detected, a fault code will be stored.	C0626 - Case 1: Skipped hall combination at motor rotation	> 1	case 1: ignition	= Terminal 15 Reset	0.001 [s]	continuous	N-Trip	Feasible	break out box
				AND
				supply voltage	= keine [V]
		C0626 - Case 2: Hall combination	= invalid	case 2: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= 0
		C0626 - Case 3: Hall combination	= invalid	case 3: ignition	= Terminal 15 Reset	0.001 [s]
		AND		AND
		Failed hall sensor	= 1	supply voltage	= keine [V]
		C0626 - Case 4: Supply voltage of hall sensor	< 3 [V]	case 4: ignition	> 3	0.001 [s]
				AND
				supply voltage	= 0 [V]
		C0626 - Case 5: Index offset	< -40 [°]	case 5: engine speed	= 0 [rpm]	0.005 [s]
		OR		OR

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
			Index offset	> 40 [°]	ready to drive	= index offset is in the range
			C0626 - Case 6: the conduct of index sensor signal	= shortcut to ground	case 6: engine speed)	= 0 [rpm]	0.030 [s]
			OR		OR
			the conduct of index sensor signal	= shortcut to positive potential	(ready to drive	= none
					AND
					steering movement)	= none
	C0627	This monitoring checks the measurement value of the supply voltage of hall sensors is evaluated. If an overvoltage is detected, a fault code will be stored and the SCU will be locked immediately.	C0627 - Case 1: RLS: supply voltage out of range high	> 7 [V]	case 1: ignition	= ECU Reset	0.001 [s]	continuous	N-Trip	Feasible	break out box
					AND
					supply voltage	< 7 [V]
	C0628	This monitoring checks Active conditions of active steering are monitored. If one of active conditions is not fulfilled, a fault code will be stored.	C0628 - Case 1: active condition of Active Steering	= not fulfilled	case 1: ignition	= fulfilled	1 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					supply voltage	= none [V]
					AND
					Vehicle speed	= none [mph]
			C0628 - Case 2: vehicle speed	> 100 [km/h]	case 2: ignition	= none	0.005 [s]
					AND
					supply voltage	= none [V]
			C0628 - Case 3: system start via index sensor	= required	case 3: ignition	= none	0.005 [s]
					AND
					supply voltage	= none [V]
	C0629	This monitoring checks Index signal, basic setup conditions, synchronization angle and dataset are monitored. If an index or basic setup or synchronization or dataset malfunction is detected, a fault code will be stored.	C0629 - Case 1: motor angle)	= invalid	case 1: ignition	= Basic Settings available again	0.005 [s]	continuous	N-Trip	Feasible	break out box
			OR		AND
			(index learning	= 100 [%]	supply voltage	= none [V]
			AND
			index value)	= out of range
			C0629 - Case 2: index signal	= +/-8 [°] out of learned "Nut"	case 2: engine speed)	= 0 [rpm]	0.03 [s]
					OR
					(ready to drive	= none
					AND
					steering movement)	= none
			C0629 - Case 3: synchronized angle after a successful Basic Setting	> 350 [°]	case 3: engine speed	= 0 [rpm]	0.01 [s]
					OR
					ready to drive	= none
			C0629 - Case 4: dataset	= implausible	case 4: ignition	= proper dataset flashed	0.001 [s]
					AND
					supply voltage	= none [V]
			C0629 - Case 5: dataset flashed	= no dataset	case 5: ignition	= vehicle specific dataset flashed	0.001 [s]
					AND
					supply voltage	= none [V]
			C0629 - Case 6: index sensor	= not 100% learned	case 6: ignition	= on	0.005 [s]
					AND
					supply voltage	= none [V]
	C062A	This monitoring checks The ECU temperature is evaluated. If an over-temperature is detected, a fault code will be stored and the SCU will be set in safe mode immediately. (SCU is locked)	C062A - Case 1: printed circuit board: temperature	>= 115	case 1: ignition	= none	0.1 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					supply voltage	= none [V]
	C062B	This monitoring checks The ECU temperature is evaluated. If an under-temperature is detected, a fault code will be stored and the SCU will be set in safe mode immediately. (SCU is locked)	C062B - Case 1: printed circuit board: temperature	<= -45 [°C]	case 1: ignition	= none	100 ms	continuous	N-Trip	Not feasible - waiver requested
					AND
					supply voltage	= none [V]
	C115C	This monitoring checks the measurement value of the supply voltage is evaluated. If over voltage is detected, a fault code will be stored and the SCU will be set in safe mode immediately. (SCU is locked reversible)	C115C - Case 1: supply voltage	> 17.8 [V]	case 1: ignition	= on	2 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					supply voltage	< 16.6 [V]
		This monitoring checks the measurement value of the supply voltage is evaluated. If a voltage malfunction is detected, a fault code will be stored.	C115C - Case 1: last shutdown	= failed	case 1: ignition	= on	0 [s]	continuous	N-Trip	Feasible	break out box
					AND
					supply voltage	> 10.4 [V]
			C115C - Case 2: supply voltage)	< 6.7 [V]	C115C 2: engine speed	= 0 [rpm]	2 [s]
			OR		OR
			(supply voltage	> 7.6 [V]	ready to drive	= none
			AND
			supply voltage)	< 8.3 [V]
			(C115C - Case 3: supply voltage	< 8.3 [V]	C115C 3: ignition	= on	90 [s]
			AND		AND
			motor control)	= no motor control	supply voltage	> 10.4 [V]
			OR
			(supply voltage	< 9.6 [V]
AND
motor control			= with motor control
AND
vehicle speed)			> 10 [km/h]
U0131	This monitoring checks Communication with power steering control module is monitored for time out. The diagnostic performs a time out check. If no message is received within a defined time, a fault code will be stored.	U0131 - Case 1: PDU LH_EPS_02	= not received for at least 200 ms	case 1: ignition	= received	0.1 [s]	continuous	N-Trip	Feasible	break out box
				AND
				supply voltage	= none [V]
		U0131 - Case 2: PDU LH_EPS_03	= not received for at least 500 ms	case 2: ignition	= received	0.5 [s]
				AND
				supply voltage	= none [V]
U0319	This monitoring checks Indicators for the difference between the main and the div path of Status of VSR, CAP, SYNC, Desired Angle of Motor and Steering Assistance Functions, Desired Motor Angle of CUC Function, Motor Offset of MOC Function, Steering Angle and ESC-Desired Angle, Adjusted Steering Angle and Identified Offset of Steering Angle, Correction Angle related to Motor, Desired Motor Angle of SYNC, Actual and Desired Motor Angle, ESC Desired Angle, Desired Motor Angle from ESM, VSR and LBM, Refined Steering Angle of VSR, Desired Pinion Angle from LBM, Current Function Status of VSR, Status of End-Stop, Vehicle Speed in VBM, the state of angle-setpoint limitation are monitored. If indicator value differs from the threshold value, a fault code will be stored and the SCU will be set in safe mode immediately. (SCU is locked reversible) Data Flash, OS, DEM, CRC of Data Set Block and set value of diagnostic configuration service are monitored. If a failure is detected, a fault code will be stored.	U0319 - Case 1: application data	= changed by XCP Flash	case 1: ignition	= keine	0.001 [s]	continuous	N-Trip	Not feasible - waiver requested
				AND
				supply voltage	= keine [V]
		U0319 - Case 2: data flash	= fails	case 2: ignition	= keine	0.001 [s]
				AND
				supply voltage	= keine [V]
		U0319 - Case 3: data-flash layout	= no match to the expected layout version	case 3: ignition	= keine	0.001 [s]
				AND
				supply voltage	= keine [V]
		U0319 - Case 4: Stack error	= occurs	case 4: ignition	= keine	0.001 [s]
		OR		AND
		Return Value of an OS function	<> 1	supply voltage	= keine [V]
		OR
		Program flow	= failed
		U0319 - Case 5: operating system execution	= failed	case 5: ignition	= keine	0.001 [s]
				AND
				supply voltage	= keine [V]
		U0319 - Case 6: calling the default program block in a control structure	= wrong	case 6: ignition	= keine	0.001 [s]
				AND
				supply voltage	= keine [V]
		U0319 - Case 7: indicator for the difference between the main and the div path of Status of VSR, CAP, SYNC (L2 Routine - Div Voter FS)	> 0	case 7: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 8: indicator for the difference between the main and the div path of Status of VSR, CAP, SYNC (L1 Routine - Voter FS)	= 1	case 8: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 9: indicator for the difference between the main and the div path of Desired Angle of Motor and Steering Assistance Functions (L1 Routine: Voter CAP)	= 1	case 9: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 10: indicator for the difference between the main and the div path of Desired Angle of Motor and Steering Assistance Functions (L2 Routine: Div Voter CAP)	> 0	case 10: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 11: "indicator for the difference between the main and the div path of Desired Motor Angle of CUC Function (L2 Routine: Div Voter CUC)"	> 0	case 11: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 12: "indicator for the difference between the main and the div path of Desired Motor Angle of CUC Function (L1 Routine: Voter CUC)"	> 0	case 12: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 13: indicator for the difference between the main and the div path of Motor Offset of MOC Function (L1 Routine: Voter MOC)	= 1	case 13: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 14: indicator for the difference between the main and the div path of Motor Offset of MOC Function (L2 Routine: Div Voter MOC)	= 1	case 14: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 15: indicator for the difference between the main and the div path of Steering Angle and ESP-Desired Angle (L1 Routine: Voter RGC)	>= 1	case 15: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 16: indicator for the difference between the main and the div path of Steering Angle and ESP-Desired Angle (L2 Routine: Div Voter RGC)	= 1	case 16: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 17: indicator for the difference between the main and the div path of Adjusted Steering Angle and Identified Offset of Steering Angle (L1 Routine: Voter SAC)	<> 0	case 17: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 18: indicator for the difference between the main and the div path of Adjusted Steering Angle and Identified Offset of Steering Angle (L2 Routine: Div Voter SAC)	<> 0	case 18: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 19: indicator for the difference between the main and the div path of Correction Angle related to Motor (L1 Routine: Voter SOC)	<> 0	case 19: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 20: indicator for the difference between the main and the div path of Correction Angle related to Motor (L2 Routine: Div Voter SOC)	<> 0	case 20: engine speed	= 0 [rpm]	0.001 [s]
				OR
				ready to drive	= keine
		U0319 - Case 21: indicator for the difference between the main and the div path of Desired Motor Angle of SYNC (L1 Routine: Voter SYNC)	> 0	case 21: engine speed	= 0 [rpm]	0.001 [s]
				OR
ready to drive	= keine
U0319 - Case 22: indicator for the difference between the main and the div path of Desired Motor Angle of SYNC (L2 Routine: Div Voter SYNC)	> 0	case 22: engine speed	= 0 [rpm]	0.001 [s]
		OR
		ready to drive	= keine
U0319 - Case 23: indicator for the difference between the main and the div path of Actual and Desired Motor Angle (L1 Routine: Voter SYSINT)	<> 0	case 23: engine speed	= 0 [rpm]	0.001 [s]
		OR
		ready to drive	= keine

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
			U0319 - Case 24: indicator for the difference between the main and the div path of Actual and Desired Motor Angle (L2 Routine: Div Voter SYSINT)	<> 0	case 24: engine speed	= 0 [rpm]	0.001 [s]
					OR
					ready to drive	= keine
			U0319 - Case 25: indicator for the difference between the main and the div path of ESP Desired Angle (L1 Routine: Voter VDCP)	> 0	case 25: engine speed	= 0 [rpm]	0.001 [s]
					OR
					ready to drive	= keine
			U0319 - Case 26: indicator for the difference between the main and the div path of ESP Desired Angle (L2 Routine: Div Voter VDCP)	> 0	case 26: engine speed	= 0 [rpm]	0.001 [s]
					OR
					ready to drive	= keine
			U0319 - Case 27: indicator for the difference between the main and the div path of Desired Motor Angle from ESM, VSR and LBM, Refined Steering Angle of VSR, Desired Pinion Angle from LBM, Current Function Status of VSR, Status of End-Stop (L1 Routine: Voter VSR)	<> 0	case 27: engine speed	= 0 [rpm]	0.001 [s]
					OR
					ready to drive	= keine
			U0319 - Case 28: indicator for the difference between the main and the div path of Desired Motor Angle from ESM, VSR and LBM, Refined Steering Angle of VSR, Desired Pinion Angle from LBM, Current Function Status of VSR, Status of End-Stop (L2 Routine: Div Voter VSR)	<> 0	case 28: engine speed	= 0 [rpm]	0.001 [s]
					OR
					ready to drive	= keine
			U0319 - Case 29: indicator for the difference between the main and the div path of Vehicle Speed in VBM (L1 Routine: Voter VVP)	<> 0	case 29: engine speed	= 0 [rpm]	0.001 [s]
					OR
					ready to drive	= keine
			U0319 - Case 30: indicator for the difference between the main and the div path of Vehicle Speed in VBM (L2 Routine: Div Voter VVP)	<> 0	case 30: engine speed	= 0 [rpm]	0.001 [s]
					OR
					ready to drive	= keine
			U0319 - Case 31: indicator for the difference between the main and the div path of the state of angle-setpoint limitation (L1 Routine: Voter WB)	> 0	case 31: engine speed	= 0 [rpm]	0.001 [s]
			AND		OR
			indicator for the difference between the main and the div path of the state	< 4	ready to drive	= keine
			U0319 - Case 32: indicator for the difference between the main and the div path of the state of angle-setpoint limitation (L2 Routine: Div Voter WB)	> 0	case 32: engine speed	= 0 [rpm]	0.001 [s]
			AND		OR
			indicator for the difference between the main and the div path of the state	< 4	ready to drive	= keine
			U0319 - Case 33: DEM (Diagnostic Event Manager)	= failed	case 33: ignition	= keine	0.005 [s]
					AND
					power supply	= keine
			U0319 - Case 34: CRC of Data Set Block	= defective	case 34: ignition	= keine	0.001 [s]
			AND		AND
			Data-Set Download	= not completed successfully	power supply	= keine
			U0319 - Case 35: set value of diagnostic configuration service (0x0501)	<> 0	case 35: ignition	= keine	0.005 [s]
					AND
					power supply	= keine
	U0420	This monitoring checks Received signals from power steering control module are monitored for range and performance.IfMC error of LH_EPS_02 OrCRC error of LH_EPS_02 OrSNA error OrSignal_EPS_Unterstuetzungsleistung = Init ValueOrSignal_EPS_Unterstuetzungsleistung = Error ValueOrSignal_EPS_Unterstuetzungsleistung is out of rangeOrSignal_EPS_Drehzahlreserve is equal to error valueOrSignal_EPS_Drehzahlreserve is out of rangea fault code will be stored and the SCU will be set in safe mode immediately. (SCU is locked)	U0420 - Case 1: LH_EPS_02	= received with invalid message counter	case 1: ignition	= received with valid message counter	0.2 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					supply voltage	= none [V]
			U0420 - Case 2: LH_EPS_02	= received with a CRC error	case 2: ignition	= received with valid CRC	0.04 [s]
					AND
					supply voltage	= none [V]
			U0420 - Case 3: LH_EPS_02	= received with invalid signal value	case 3: ignition	< received with valid signal value	0.2 [s]
					AND
					supply voltage	= none [V]
			U0420 - Case 4: steering moment	> 8 [Nm]	case 4: ignition	= none	0.5 [s]
			OR		AND
			steering moment	= 0 [Nm]	supply voltage	= none [V]
			OR
			steering moment qbit	= 1
			U0420 - Case 5: steering assist	= 127 [%]	case 5: engine speed	= 0 [rpm]	0.04 [s]
					OR
					ready to drive	= none
			U0420 - Case 6: steering assist	= 127.5 [%]	case 6: ignition	= none	0.04 [s]
					AND
					supply voltage	= none [V]
			U0420 - Case 7: steering assist	> 100 [%]	case 7: ignition	= none	0.04 [s]
			AND		AND
			steering assist	< 127 [%]	supply voltage	= none [V]
			U0420 - Case 8: revolution reserve	> 1000 [°/s]	case 8: ignition	= none	0.04 [s]
			AND		AND
			revolution reserve	> 1260 [°/s]	supply voltage	= none [V]
			U0420 - Case 9: revolution reserve	= 1270 [°/s]	case 9: ignition	= none	0.04 [s]
					AND
supply voltage					= none [V]
Steering Angle Sensor	C0527	This monitoring checks if the sign of the steering angle signal is incorrect.	Result of compared yaw rates is negative	= True	Full system mode	= On	0.04 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			Forward driving is detected	= True	Curve Driving detected	= True
	C0528	This monitoring checks the quantity of the SAS messages received via bus communication.	Number of SAS messages in the network	> 3	Ignition key	= On	0.2 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR
			Number of SAS messages in the network	< 1
		This monitoring checks if there is a defective steering angle sensor.	|Steering angle offset|	> 15 [deg]	Ignition key	= On	0.04 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Vehicle speed	> 6.21 [mph]
					AND
					Vehicle speed	< 124.15 [mph]
					AND
					Propulsion system	= Active
	C052A	This monitoring checks if the steering angle sensor has a fault during the dynamic verification of sensor at plant End of Line.	Steering angle deviation	> 25 [%]	Ignition key	= On	0.04 [s]	Continuous during curve driving	N-Trip	Not feasible - waiver requested
					AND
					Steering angle	> 70 [deg]
					AND
					EOL Dynamic Verification of Sensors	= Activated
		This monitoring checks if the steering angle signal is constant when it should change.	Variation of steering-angle signal	< 5 [deg]	Vehicle speed	> 3.35 [mph]	0.04 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			For time	> 0.04 [s]	Set steering angle correction	< 690 [deg]
					AND
					Forward driving is not detected	= False
					AND
					No blocked wheels detected	= True
		This monitoring checks if the steering angle velocity is plausible or not.	Steering angle velocity (signal gradient)	> 40 [deg / 0.02 s]	Vehicle speed	>= 3.35 [mph]	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Difference between two change of two signal gradient	> 30 [deg / 0.02 s]	2 SAS messages received within the last 0.02 [s]	= True
		This monitoring checks an implausible gradient of the additional steering angle.	SAS gradient	> 60 [deg]	Vehicle speed	> 3.11 [mph]	0.04 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			SAS gradient	> 90 [deg]	2 steering angle sensor messages send within time	= 20 [ms]
			OR		AND
			SAS gradient change	> 30 [deg]	Steering Angle Sensor quality bit is initialized	= True
		This monitoring checks if the steering angle sensor is defective or mounted wrong.	Absolute value of Steering angle	> 810 [deg]	BSCM State	= Running	0.3 [s]	continuous	N-Trip	Not feasible - waiver requested
		This monitoring checks if the values of the SAS and the values of the yaw rate sensor are plausible.	(measured steering angle) - (model calculated value based on yaw rate signal)	> 70/(Current speed) [deg]	BSCM State	= Running	0.04 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					Difference between velocity of left and right wheels on front axle	< 0.3 [%]
					AND
					Lateral acceleration	< 0.5 [m/s^2]
					AND
					Yaw rate	< 2 [deg/s]
Wheel Speed Sensor	C003F	This monitoring checks if the measured rotation directions of the wheels are correct.	Rotation direction of the monitored wheel is opposite from the 2 other wheels	= True	Ignition key	= On	20 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Vehicle speed	> 3.13 [mph]
					AND
					Sensor supply voltage	> 5 [V]
		This monitoring checks if the wheel speed sensors at the Front Axle are mounted incorrectly or if the wheel speed sensors at the front axle are swapped.	Integrated model yaw rate out of Front Axle Wheel Speed Sensors	< -90 [deg]	Ignition key	= On	> 9 [s]	Continuous	N-Trip	Feasible	break out box
			AND		AND
			Integrated model yaw rate out of Steering Angle Sensor	> 90 [deg]	Curve driving	> 3 [deg/s]
					AND
					Vehicle speed	> 4.47 [mph]
					AND

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
					Sensor supply voltage	> 5 [V]
		This monitoring checks if the wheel speed sensors at the Rear Axle are mounted incorrectly or if the wheel speed sensors at the rear axle are swapped.	Integrated model yaw rate out of Rear Axle Wheel Speed Sensors	< -90 [deg]	Ignition key	= On	> 9 [s]	Continuous	N-Trip	Feasible	break out box
			AND		AND
			Integrated model yaw rate out of Steering Angle Sensor	> 90 [deg]	Curve driving	> 3 [deg/s]
					AND
					Vehicle speed	> 4.47 [mph]
					AND
					Sensor supply voltage	> 5 [V]
	C0500	This monitoring checks for implausible error patterns of Wheel Speed Sensor Front Left (WSS FL) Signal which can't be classified either as an electrical fault (such as supply to ground which are covered by other monitorings) or valid signal.	Wheel Speed Sensor Front Left Current Value Monitoring does not detect failure	= True	Ignition key	= On	0.12 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			Wheel Speed Sensor Front Left Supply Line Monitoring does not detect failure	= True	Sensor supply voltage	> 5 [V]
			AND
			Wheel Speed Sensor Front Left Voltage Value Monitoring does not detect failure	= True
			AND
			Signal is not valid	= True
		This monitoring checks if there is a stop pulse from WSS Front Left detected.	No level change on the signal is detected	= True	Ignition key	= On	3.5 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			Stop pulse is not detected	= True	Vehicle speed	< 1.12 [mph]
					AND
					Sensor supply voltage	> 5 [V]
		This monitoring checks the availability of the WSS Front Left hardware.	Hardware check failed	= True	Ignition key	= On	0.035 [s]	Once	N-Trip	Feasible	break out box
					AND
					Sensor supply voltage	> 5 [V]
	C0501	This monitoring checks if the WSS Front Left cannot detect the wheel rotation during driving anymore.	Speed of 1 wheel	= 0 [mph]	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			Vehicle speed increase	> 11.18 [mph]	Vehicle speed	> 1.79 [mph]
					AND
					Control functions*) are not active	= True
					AND
					Sensor supply voltage	> 5 [V]
		This monitoring checks if the WSS Front Left cannot detect the wheel rotation out of vehicle standstill.	(Speed of 1 wheel	= 0 [mph]	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			Vehicle speed increase)	> 7.45 [mph]	Initial Vehicle speed	<= 1.79 [mph]
			OR		AND
			(Speed of 2 wheels	= 0 [mph]	Control functions*) are not active	= True
			AND		AND
			Vehicle speed increase)	> 14.91 [mph]	Sensor supply voltage	> 5 [V]
		This monitoring checks if the WSS Front Left cannot detect the wheel rotation during driving anymore.	No wheel speed signal edge for a time	= 0.005 [s]	BSCM State	= Running	0.08 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					Vehicle speed	> 26.84 [mph]
					AND
					Wheel deceleration	< 300 [m/s^2]
					AND
					No aquaplaning	= True
					AND
					Sensor supply voltage	> 5 [V]
		This monitoring checks for a discontinuous WSS Front Left Signal.	(Number of detected increasing edges from	< 3	System voltage	> 6.9 [V]	20 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Number of detected increasing edges from)	> 5	Sensor supply voltage	> 5 [V]
			OR
			(Wheel acceleration	> 981 [m/sec^2]
			AND
			For a calibrated number of counts	= 2
			AND
			For time)	< 1.2 [s]
			OR
			(Wheel acceleration	>= 500 [m/sec^2]
			AND
			Accumulation of the weighted noise amplitude in current driving cycle)	> 4
		This monitoring checks WSS Front Left for implausibly high wheel speed value.	Measured wheel speed	> 223.7 [mph]	System voltage	> 6.9 [V]	5 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Sensor supply voltage	> 5 [V]
		This monitoring checks if the difference between the wheel speed sensor signals and WSS Front Left is within a valid range.	Difference of wheel speeds	> 3.7 [mph]	Ignition key	= On	72 [s] depending on the cases it's 9 or 18 s	Continuous	N-Trip	Not feasible - waiver requested
					AND
Sensor supply voltage					> 5 [V]
AND
Vehicle speed					< 62.13 [mph]
Difference of wheel speeds related to the vehicle speed			> 6 [%]	Ignition key	= On	72 [s]
				AND
				Sensor supply voltage	> 5 [V]
				AND
				Vehicle speed	>= 62.13 [mph]
This monitoring checks if the High End Timer Transfer Unit (HETTU) buffer of WSS Signal Front Left has overflowed.		HETTU buffer is in "overflow" state	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
				AND
				Sensor supply voltage	> 5 [V]
This monitoring checks if the setting of the parity bit for the WSS Front Left signal is correct.		Parity test is not successful	= True	Ignition key	= On	1 [s]	Continuous	N-Trip	Not feasible - waiver requested
				AND
				Sensor supply voltage	> 5 [V]
C0502	This monitoring checks if there is an electrical failure (short to ground or interruption) on the signal line of WSS Front Left.	Current on the signal line	< 0.0038 [A]	System voltage	> 6.9 [V]	0.12 [s]	Continuous	N-Trip	Feasible	break out box
				AND
				Sensor supply voltage	> 5 [V]
	This monitoring checks if there is an electrical failure (short to ground or interruption) on the supply line WSS Front Left.	Current on the supply line	< 0.16 [A]	System voltage	> 6.9 [V]	0.12 [s]	Continuous	N-Trip	Feasible	break out box
				AND
				Sensor supply voltage	> 5 [V]
C0503	This monitoring checks if there is an electrical failure (short to battery) on the signal line of WSS Front Left.	Current on the supply line	> 0.1 [A]	System voltage	> 6.9 [V]	0.12 [s]	Continuous	N-Trip	Feasible	break out box
				AND
				Sensor supply voltage	> 5 [V]
C0506	This monitoring checks for implausible error patterns of Wheel Speed Sensor Front Right (WSS FR) Signal which can't be classified either as an electrical fault (such as supply to ground which are covered by other monitorings) or valid signal.	Wheel Speed Sensor Front Left Current Value Monitoring does not detect failure	= True	Ignition key	= On	0.12 [s]	Continuous	N-Trip	Not feasible - waiver requested
		AND		AND
		Wheel Speed Sensor Front Left Supply Line Monitoring does not detect failure	= True	Sensor supply voltage	> 5 [V]
		AND
		Wheel Speed Sensor Front Left Voltage Value Monitoring does not detect failure	= True
		AND
		Signal is not valid	= True
	This monitoring checks if there is a stop pulse from WSS Front Right detected.	No level change on the signal is detected	= True	Ignition key	= On	3.5 [s]	Continuous	N-Trip	Not feasible - waiver requested
		AND		AND
		For time	> 0.15 [s]	Sensor supply voltage	> 5 [V]
		AND		AND
		Stop pulse is not detected	= True	Vehicle speed	< 1.12 [mph]
	This monitoring checks the availability of the WSS Front Right hardware.	Hardware check failed	= True	Ignition key	= On	0.035 [s]	Once	N-Trip	Feasible	break out box
				AND
				Sensor supply voltage	> 5 [V]
C0507	This monitoring checks if the WSS Front Right cannot detect the wheel rotation during driving anymore.	Speed of 1 wheel	= 0 [mph]	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Not feasible - waiver requested
		AND		AND
		Vehicle speed increase	> 11.18 [mph]	Vehicle speed	> 1.79 [mph]
				AND
				Control functions*) are not active	= True
				AND
				Sensor supply voltage	> 5 [V]
	This monitoring checks if the WSS Front Right cannot detect the wheel rotation out of vehicle standstill.	(Speed of 1 wheel	= 0 [mph]	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Not feasible - waiver requested
		AND		AND
		Vehicle speed increase)	> 7.45 [mph]	Initial Vehicle speed	<= 1.79 [mph]
		OR		AND
		(Speed of 2 wheels	= 0 [mph]	Control functions*) are not active	= True
		AND		AND

Table continues below

System / Component	Fault Code	Monitoring Strategy Description	Malfunction Criteria	Malfunction Criteria Threshold Value	Secondary Parameters	Enable Condition	Time Required	Frequency of Checks	MIL Illumination	Testable Without Damage?	With which tools?
Brake System Control Module (BSCM)
			Vehicle speed increase)	> 14.91 [mph]	Sensor supply voltage	> 5 [V]
		This monitoring checks if the WSS Front Right cannot detect the wheel rotation during driving anymore.	No wheel speed signal edge for a time	= 0.005 [s]	BSCM State	= Running	0.08 [s]	continuous	N-Trip	Not feasible - waiver requested
					AND
					Vehicle speed	> 26.84 [mph]
					AND
					Wheel deceleration	< 300 [m/s^2]
					AND
					No aquaplaning	= True
					AND
					Sensor supply voltage	> 5 [V]
		This monitoring checks for a discontinuous WSS Front Right Signal.	(Number of detected increasing edges from	< 3	System voltage	> 6.9 [V]	20 [s]	Continuous	N-Trip	Not feasible - waiver requested
			OR		AND
			Number of detected increasing edges from)	> 5	Sensor supply voltage	> 5 [V]
			OR
			(Wheel acceleration	> 981 [m/sec^2]
			AND
			For a calibrated number of counts	= 2
			AND
			For time)	< 1.2 [s]
			OR
			(Wheel acceleration	>= 500 [m/sec^2]
			AND
			Accumulation of the weighted noise amplitude in current driving cycle)	> 4
		This monitoring checks WSS Front Right for implausibly high wheel speed value.	Measured wheel speed	> 223.7 [mph]	System voltage	> 6.9 [V]	5 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Sensor supply voltage	> 5 [V]
		This monitoring checks if the difference between the wheel speed sensor signals and WSS Front Right is within a valid range.	Difference of wheel speeds	> 3.7 [mph]	Ignition key	= On	72 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Sensor supply voltage	> 5 [V]
					AND
					Vehicle speed	< 62.13 [mph]
			Difference of wheel speeds related to the vehicle speed	> 6 [%]	Ignition key	= On	72 [s]
					AND
					Sensor supply voltage	> 5 [V]
					AND
					Vehicle speed	>= 62.13 [mph]
		This monitoring checks if the High End Timer Transfer Unit (HETTU) buffer of WSS Signal Front Right has overflowed.	HETTU buffer is in "overflow" state	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Sensor supply voltage	> 5 [V]
		This monitoring checks if the setting of the parity bit for the WSS Front Right signal is correct.	Parity test is not successful	= True	Ignition key	= On	1 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Sensor supply voltage	> 5 [V]
	C0508	This monitoring checks if there is an electrical failure (short to ground or interruption) on the signal line of WSS Front Right.	Current on the signal line	< 0.0038 [A]	System voltage	> 6.9 [V]	0.12 [s]	Continuous	N-Trip	Feasible	break out box
					AND
					Sensor supply voltage	> 5 [V]
		This monitoring checks if there is an electrical failure (short to ground or interruption) on the supply line WSS Front Right.	Current on the supply line	< 0.16 [A]	System voltage	> 6.9 [V]	0.12 [s]	Continuous	N-Trip	Feasible	break out box
					AND
					Sensor supply voltage	> 5 [V]
	C0509	This monitoring checks if there is an electrical failure (short to battery) on the signal line of WSS Front Right.	Current on the signal line	> 0.100 [A]	System voltage	> 6.9 [V]	0.12 [s]	Continuous	N-Trip	Feasible	break out box
					AND
					Sensor supply voltage	> 5 [V]
	C050C	This monitoring checks for implausible error patterns of Wheel Speed Sensor Rear Left (WSS RL) Signal which can't be classified either as an electrical fault (such as supply to ground which are covered by other monitorings) or valid signal.	Wheel Speed Sensor Front Left Current Value Monitoring does not detect failure	= True	Ignition key	= On	0.12 [s]	Continuous	N-Trip	Not feasible - waiver requested
			AND		AND
			Wheel Speed Sensor Front Left Supply Line Monitoring does not detect failure	= True	Sensor supply voltage	> 5 [V]
			AND
			Wheel Speed Sensor Front Left Voltage Value Monitoring does not detect failure	= True
			AND
			Signal is not valid	= True
		This monitoring checks if there is a stop pulse from WSS Rear Left detected.	No level change on the signal is detected	= True	Ignition key	= On	3.5 [s]	Continuous	N-Trip	Not feasible - waiver requested
					AND
					Sensor supply voltage	> 5 [V]
					AND
					Vehicle speed	< 1.12 [mph]
		This monitoring checks the availability of the WSS Rear Left hardware.	Hardware check failed	= True	Ignition key	= On	0.035 [s]	Once	N-Trip	Feasible	break out box
AND
Sensor supply voltage					> 5 [V]
C050D	This monitoring checks if the WSS Rear Left cannot detect the wheel rotation during driving anymore.	Speed of 1 wheel	= 0 [mph]	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Not feasible - waiver requested
		AND		AND
		Vehicle speed increase	> 11.18 [mph]	Vehicle speed	> 1.79 [mph]
				AND
				Control functions*) are not active	= True
				AND
				Sensor supply voltage	> 5 [V]
	This monitoring checks if the WSS RearLeft cannot detect the wheel rotation out of vehicle standstill.	(Speed of 1 wheel	= 0 [mph]	BSCM State	= Running	0.12 [s]	continuous	N-Trip	Not feasible - waiver requested
		AND		AND
		Vehicle speed increase)	> 7.45 [mph]	Initial Vehicle speed	<= 1.79 [mph]
		OR		AND
		(Speed of 2 wheels	= 0 [mph]	Control functions*) are not active	= True
		AND		AND
		Vehicle speed increase)	> 14.91 [mph]	Sensor supply voltage	> 5 [V]
	This monitoring checks if the WSS Rear Left cannot detect the wheel rotation during driving anymore.	No wheel speed signal edge for a time	= 0.005 [s]	BSCM State	= Running	0.08 [s]	continuous	N-Trip	Not feasible - waiver requested
				AND
				Vehicle speed	> 26.84 [mph]
				AND
				Wheel deceleration	< 300 [m/s^2]
				AND
				No aquaplaning	= True
				AND
				Sensor supply voltage	> 5 [V]
	This monitoring checks for a discontinuous WSS Rear Left Signal.	(Number of detected increasing edges from	< 3	System voltage	> 6.9 [V]	20 [s]	Continuous	N-Trip	Not feasible - waiver requested
		OR		AND
		Number of detected increasing edges from)	> 5	Sensor supply voltage	> 5 [V]
		OR
		(Wheel acceleration	> 981 [m/sec^2]
		AND
		For a calibrated number of counts	= 2
		AND
		For time)	< 1.2 [s]
		OR
		(Wheel acceleration	>= 500 [m/sec^2]
		AND
		Accumulation of the weighted noise amplitude in current driving cycle)	> 4
	This monitoring checks WSS Rear Left for implausibly high wheel speed value.	Measured wheel speed	> 223.7 [mph]	System voltage	> 6.9 [V]	5 [s]	Continuous	N-Trip	Not feasible - waiver requested
				AND
				Sensor supply voltage	> 5 [V]
	This monitoring checks if the difference between the wheel speed sensor signals and WSS Rear Left is within a valid range.	Difference of wheel speeds	> 3.7 [mph]	Ignition key	= On	72 [s]	Continuous	N-Trip	Not feasible - waiver requested
				AND
				Sensor supply voltage	> 5 [V]
				AND
				Vehicle speed	< 62.13 [mph]
		Difference of wheel speeds related to the vehicle speed	> 6 [%]	Ignition key	= On	72 [s]
				AND
				Sensor supply voltage	> 5 [V]
				AND
				Vehicle speed	>= 62.13 [mph]
	This monitoring checks if the High End Timer Transfer Unit (HETTU) buffer of WSS Signal Rear Left has overflowed.	HETTU buffer is in "overflow" state	= True	Ignition key	= On	0.03 [s]	Continuous	N-Trip	Not feasible - waiver requested
				AND
				Sensor supply voltage	> 5 [V]
	This monitoring checks if the setting of the parity bit for the WSS Rear Left signal is correct.	Parity test is not successful	= True	Ignition key	= On	1 [s]	Continuous	N-Trip	Not feasible - waiver requested
				AND
				Sensor supply voltage	> 5 [V]
C050E	This monitoring checks if there is an electrical failure (short to ground or interruption) on the signal line of WSS Rear Left.	Current on the signal line	< 0.0038 [A]	System voltage	> 6.9 [V]	0.12 [s]	Continuous	N-Trip	Feasible	break out box
				AND
				Sensor supply voltage	> 5 [V]
	This monitoring checks if there is an electrical failure (short to ground or interruption) on the supply line WSS Rear Left.	Current on the supply line	< 0.16 [A]	System voltage	> 6.9 [V]	0.12 [s]	Continuous	N-Trip	Feasible	break out box
				AND
				Sensor supply voltage	> 5 [V]
C050F	This monitoring checks if there is an electrical failure (short to battery) on the signal line of WSS Rear Left.	Current on the signal line	> 0.1 [A]	System voltage	> 6.9 [V]	0.12 [s]	Continuous	N-Trip	Feasible	break out box
				AND
				Sensor supply voltage	> 5 [V]
C0512	This monitoring checks for implausible error patterns of Wheel Speed Sensor Rear Right (WSS RR) Signal which can't be classified either as an electrical fault (such as supply to ground which are covered by other monitorings) or valid signal.	Wheel Speed Sensor Front Left Current Value Monitoring does not detect failure	= True	Ignition key	= On	0.12 [s]	Continuous	N-Trip	Not feasible - waiver requested
		AND		AND
		Wheel Speed Sensor Front Left Supply Line Monitoring does not detect failure	= True	Sensor supply voltage	> 5 [V]
		AND
		Wheel Speed Sensor Front Left Voltage Value Monitoring does not detect failure	= True
		AND
		Signal is not valid	= True
	This monitoring checks if there is a stop pulse from WSS Rear Right detected.	No level change on the signal is detected	= True	Ignition key	= On	3.5 [s]	Continuous	N-Trip	Not feasible - waiver requested
				AND
				Sensor supply voltage	> 5 [V]
				AND
				Vehicle speed	< 1.12 [mph]
	This monitoring checks the availability of the WSS Rear Right hardware.	Hardware check failed	= True	Ignition key	= On	0.035 [s]	Once	N-Trip	Feasible	break out box
				AND

Table continues Brake System Control Module --, 2021 MY