Advertisement
Battery Removal
a. If the battery is removed with the system in the ARM state, the system will be placed into the ARM state upon
battery reconnect.
b. The ALARM state will be re-activated if the battery is disconnected, then reconnected, with the system in an
ALARM state.
c. If the battery is disconnected and reconnected with the system in AFTER ALARM state, the alarm will be re-
activated.
d. The system will enter DISARM mode if the battery is disconnected during the ALARM WAIT state.
Panic
a. If RKE PANIC signal is received, Siren output and hazard lamp operate for 27 seconds and the system return to
the previous state as soon as the PANIC function finishes.
b. The PANIC function will be stopped if any RKE signal is received during PANIC activation..
c. If Key reminder switch is ON during PANIC function is operating, PANIC is stopped immediately.
d. If the system goes to ALARM mode during PANIC function is operating, PANIC is stopped immediately and then
ALARM function should be activated.
e. During ALARM state;
If RKE PANIC signal is received, ALARM mode is maintained and PANIC function should be ignored. ALARM has
higher priority than PANIC function.
f. During AFTER_ALARM state;
If RKE PANIC signal is received, AFTR_ALARM mode is maintained and PANIC function should be activated.
Safe & Rescue Mode
The goal of those modes is to be able to cope with failures that may happen on some of the most critical
functionalities (for the driver security) of the system.
Safe Mode
The safe mode is entered in case of system problems such as:
a. Incoherent inputs on monitored signals. In this case, safe mode is the debouncing time before the inputs are
considered INVALID. Note that today, we have no way to detect if the rain/light sensor is in working operation or
not. It means that a driver action will be required in case of failure of this sensor;
b. Loss of the CAN frame containing the monitored signal:
c. Loss of the CAN network: CAN goes to BUS OFF state, safe mode is the time necessary for detecting the BUS
OFF state.
In all cases, the action in safe mode is to maintain the previous state of the system (for lighting and wiping). The list of
monitored signals is the same as in rescue mode
Exiting Safe Mode
The software safe mode is exited and the module goes back to the normal mode when:
a. On IPM, hardware inputs return to a coherent state;
b. The lost CAN signal comes back while timeout has not elapsed;
c. The CAN network returns to a normal state without reaching BUS OFF state.
Software safe mode is also exited when the software rescue mode is entered (problem does not disappear).
Hardware safe mode is exited and the module goes back to normal mode if the internal problem disappears (watchdog
is properly triggered again). If the problem stays, hardware safe mode is exited to enter hardware rescue mode.
Rescue Modes
The rescue mode consists in activating some safety functions when IGN2 = ON:
a. Switch on the low beams (FAM), park lamps (FAM), tail lamps (RAM) and cluster backlighting (IPM);
b. Unlock of all the doors when the rescue mode is entered with IGN2 = ON
c. Front wipers do not need to be turned on by software in rescue mode because wipers can be turned on by
manually setting the MF switch to low speed. The FAM software must keep the same state as before entering the
rescue mode.
d. When IGN2 = OFF, low beams, park/tail lamps and cluster backlighting are turned off.
Entering Rescue Modes
Advertisement
