From f8677924fbd497052389d838a3aba2849494ece4 Mon Sep 17 00:00:00 2001 From: "Hornburg Bjoern (ETAS-ECM XPC-Hi)" Date: Fri, 19 Jun 2026 17:52:24 +0200 Subject: [PATCH 1/5] [TIME] Add ASIL related requirements and rework existing --- .../features/time/docs/requirements/index.rst | 40 ++++++++++++++- docs/requirements/stakeholder/index.rst | 51 ++++++++++++++----- 2 files changed, 77 insertions(+), 14 deletions(-) diff --git a/docs/features/time/docs/requirements/index.rst b/docs/features/time/docs/requirements/index.rst index 17cbb7b6105..eecef255670 100644 --- a/docs/features/time/docs/requirements/index.rst +++ b/docs/features/time/docs/requirements/index.rst @@ -59,6 +59,17 @@ Time Synchronization The **score::time feature** shall provide an API to access the synchronized vehicle time. +.. stkh_req:: Usage of Vehicle Time base API has FFI + :id: feat_req__time__vehicle_time_base_api_ffi + :reqtype: Non-Functional + :security: NO + :safety: ASIL_B + :derived_from: stkh_req__time__time_base_api_ffi + :status: valid + :version: 1 + + Usage of the vehicle time base API shall be free from interfrences for the consuming components. + .. feat_req:: Vehicle Time base accuracy qualifier :id: feat_req__time__vehicle_time_acc_qual_api :reqtype: Functional @@ -76,6 +87,22 @@ Time Synchronization * are there any instabilities, like time jumps to the past or to the future * does the time increase in a monotonic manner. +.. feat_req:: Reliability of Vehicle Time base accuracy qualifier + :id: feat_req__time__vehicle_time_acc_qual_reliability + :reqtype: Non-Functional + :security: NO + :safety: ASIL_B + :derived_from: stkh_req__time__qualified_time_information + :status: valid + :version: 1 + + The architecture and implementation parts of the time feature shall support to ensure, + that the provided accuracy qualifier always reflects the actual quality of the local time base. + + Note: + * This does not apply to willful interferences by malicious software components or components in control by malicious actors, which are out of scope of this requirement. + * The end-to-end quality of the time information provided by the time base API may require components and protocols outside of the scope of this SW-platform to be qualified accordingly (e.g. the respective time master) or at least support this requirement (e.g. time-aware bridges/switches supporting the AUTOSAR Time Synchroization Protocol). + .. feat_req:: Vehicle Time base time point qualifier :id: feat_req__time__vehicle_time_time_pt_qual :reqtype: Functional @@ -91,7 +118,7 @@ Time Synchronization .. feat_req:: Vehicle Time control flow :id: feat_req__time__vehicle_time_ctrl_flow - :reqtype: Functional + :reqtype: Non-Functional :security: NO :safety: QM :derived_from: stkh_req__time__vehicle_time_api[version==1] @@ -148,6 +175,17 @@ Time Synchronization to absolute external sources The **score::time feature** shall provide an API to read the absolute time base, synchronized to external time sources. +.. feat_req:: Usage of Absolute Time base API has FFI + :id: feat_req__time__abs_time_base_api_ffi + :reqtype: Non-Functional + :security: NO + :safety: ASIL_B + :derived_from: stkh_req__time__time_base_api_ffi + :status: valid + :version: 1 + + Usage of the absolute time base API shall be free from interfrences for the consuming components. + .. feat_req:: Absolute Time base accuracy qualifier :id: feat_req__time__abs_acc_qual :reqtype: Functional diff --git a/docs/requirements/stakeholder/index.rst b/docs/requirements/stakeholder/index.rst index dd3c6574f4d..9c48d263726 100644 --- a/docs/requirements/stakeholder/index.rst +++ b/docs/requirements/stakeholder/index.rst @@ -254,7 +254,7 @@ Dependability .. stkh_req:: Automotive Safety Integrity Level :id: stkh_req__dependability__automotive_safety - :reqtype: Functional + :reqtype: Non-Functional :security: NO :safety: ASIL_B :rationale: The SW-platform shall be usable by safety relevant applications. @@ -840,12 +840,11 @@ Time :reqtype: Functional :security: NO :safety: QM - :rationale: Enables the system to compare events chronologically. + :rationale: Enables the system to compare in-vehicle events chronologically. :status: valid :version: 1 - The SW-platform shall provide a time synchronization framework to synchronize its clock - to Time Master within the vehicle. + The SW-platform shall provide a framework to synchronize its local vehicle clock representation to a Time Master within the vehicle. .. stkh_req:: Vehicle Time base API :id: stkh_req__time__vehicle_time_api @@ -856,7 +855,7 @@ Time :status: valid :version: 1 - The SW-platform shall provide access to synchronized vehicle time. + The SW-platform shall provide access to the synchronized vehicle time. .. stkh_req:: Synchronize the HW clock with Vehicle Time :id: stkh_req__time__hw_clock_sync @@ -864,7 +863,7 @@ Time :security: NO :safety: QM :rationale: Enables the system to compare events from different ECUs chronologically, using the same time base for timestamping ingress and egress frames. - :status: valid + :status: invalid :version: 1 The SW-platform shall synchronize the local HW clock to vehicle time. @@ -874,11 +873,11 @@ Time :reqtype: Functional :security: YES :safety: QM - :rationale: Enables the system to validate a certificate or token with temporal validity conditions, adding a UTC-timestamp to a data set. + :rationale: Enables the system to validate a certificate or token with temporal validity conditions, to add a UTC-timestamp to a data set, etc. :status: valid :version: 1 - The SW-platform shall provide a framework to synchronize the clock to external-to-vehicle absolute time base (UTC). + The SW-platform shall provide a framework to synchronize its local absolute clock representation to an external-to-vehicle absolute time base (e.g. UTC). .. stkh_req:: Absolute time base API :id: stkh_req__time__absolute_time_api @@ -891,8 +890,34 @@ Time The SW-platform shall provide access to the absolute time base, synchronized with external time sources. -.. stkh_req:: Local High precision Clock API - :id: stkh_req__time__high_precision_clock_api +.. stkh_req:: Usage of Time base APIs has FFI + :id: stkh_req__time__time_base_api_ffi + :reqtype: Non-Functional + :security: NO + :safety: ASIL_B + :rationale: Enables an application requiring a rating up to ASIL-B to use the time base API. + :status: valid + :version: 1 + + Usage of the time base APIs shall be free from interfrences for the consuming components. + +.. stkh_req:: Reliable Qualification of Time Information + :id: stkh_req__time__qualified_time_information + :reqtype: Non-Functional + :security: NO + :safety: ASIL_B + :rationale: Depending on the user needs and their SW platform configuration, it can be guaranteed that applications can rely on the quality rating of the time reference of a certain time base, even in case of interferences induces into or by QM-rated software components involved in the synchronization process. + :status: valid + :version: 1 + + The architecture and common implementation parts of the time synchronization framework shall support to ensure, that the provided qualification information of a synchronized time base always reflects the actual quality of the provided time (stamp) information. + + Note: + * This does not apply to willful interferences by malicious software components or components in control by malicious actors, which are out of scope of this requirement. + * The end-to-end quality of the time information provided by the time base API may require components and protocols outside of the scope of this SW-platform to be qualified accordingly (e.g. the respective time master) or at least support this requirement (e.g. time-aware bridges/switches supporting the AUTOSAR Time Synchroization Protocol). + +.. stkh_req:: Local High Resolution Clock API + :id: stkh_req__time__high_resolution_clock_api :reqtype: Functional :security: NO :safety: QM @@ -900,9 +925,9 @@ Time :status: valid :version: 1 - The SW-platform shall provide access to the current high precision clock from the system time provider in nanoseconds. + The SW-platform shall provide access to the current high resolution clock from the system time provider in nanoseconds. - Note: to which clock the high precision clock is mapped, depends on the system design. + Note: to which clock the high resolution clock is mapped, depends on the system design. .. stkh_req:: Local Monotonic Clock API :id: stkh_req__time__monotonic_clock_api @@ -917,10 +942,10 @@ Time Note: to which clock the monotonic clock is mapped, depends on the system design. + AI SW-platform -------------- - .. stkh_req:: On-board ML Workloads :id: stkh_req__ai_platform__enablement :reqtype: Functional From 91d61b8384801d32cbcf628bbd787ace267b9b8f Mon Sep 17 00:00:00 2001 From: "Hornburg Bjoern (ETAS-ECM XPC-Hi)" Date: Thu, 25 Jun 2026 10:22:12 +0200 Subject: [PATCH 2/5] Fix requirements linking and typo --- docs/features/time/docs/requirements/index.rst | 10 +++++----- docs/requirements/stakeholder/index.rst | 4 ++-- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/docs/features/time/docs/requirements/index.rst b/docs/features/time/docs/requirements/index.rst index eecef255670..5c480b90536 100644 --- a/docs/features/time/docs/requirements/index.rst +++ b/docs/features/time/docs/requirements/index.rst @@ -245,18 +245,18 @@ Time Synchronization to absolute external sources Local Clock ^^^^^^^^^^^^^^^^^^^^ -.. feat_req:: High precision clock API - :id: feat_req__time__high_prec_clock_api +.. feat_req:: High resolution clock API + :id: feat_req__time__high_res_clock_api :reqtype: Functional :security: NO :safety: QM - :derived_from: stkh_req__time__high_precision_clock_api[version==1] + :derived_from: stkh_req__time__high_res_clock_api[version==1] :status: valid :version: 1 - The **score::time feature** shall provide an API to read the high precision clock in nanoseconds precision. + The **score::time feature** shall provide an API to read the high resolution clock in nanoseconds resolution. - Note: to which clock the high precision clock is mapped, depends on the system design. + Note: to which clock the high resolution clock is mapped, depends on the system design. *Use case:* such clocks might be used for time-critical applications, such as audio/video streaming, event logging, and diagnostics. diff --git a/docs/requirements/stakeholder/index.rst b/docs/requirements/stakeholder/index.rst index 9c48d263726..9f4bbf19496 100644 --- a/docs/requirements/stakeholder/index.rst +++ b/docs/requirements/stakeholder/index.rst @@ -906,7 +906,7 @@ Time :reqtype: Non-Functional :security: NO :safety: ASIL_B - :rationale: Depending on the user needs and their SW platform configuration, it can be guaranteed that applications can rely on the quality rating of the time reference of a certain time base, even in case of interferences induces into or by QM-rated software components involved in the synchronization process. + :rationale: Depending on the user needs and their SW platform configuration, it can be guaranteed that applications can rely on the quality rating of the time reference of a certain time base, even in case of interferences induced into or by QM-rated software components involved in the synchronization process. :status: valid :version: 1 @@ -917,7 +917,7 @@ Time * The end-to-end quality of the time information provided by the time base API may require components and protocols outside of the scope of this SW-platform to be qualified accordingly (e.g. the respective time master) or at least support this requirement (e.g. time-aware bridges/switches supporting the AUTOSAR Time Synchroization Protocol). .. stkh_req:: Local High Resolution Clock API - :id: stkh_req__time__high_resolution_clock_api + :id: stkh_req__time__high_res_clock_api :reqtype: Functional :security: NO :safety: QM From a03ef8c80613f088758c66cafac57ab697ec1078 Mon Sep 17 00:00:00 2001 From: "Hornburg Bjoern (ETAS-ECM XPC-Hi)" Date: Thu, 25 Jun 2026 11:23:18 +0200 Subject: [PATCH 3/5] Fix workflow findings --- docs/features/time/docs/requirements/index.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/features/time/docs/requirements/index.rst b/docs/features/time/docs/requirements/index.rst index 5c480b90536..777e36e7c67 100644 --- a/docs/features/time/docs/requirements/index.rst +++ b/docs/features/time/docs/requirements/index.rst @@ -59,7 +59,7 @@ Time Synchronization The **score::time feature** shall provide an API to access the synchronized vehicle time. -.. stkh_req:: Usage of Vehicle Time base API has FFI +.. feat_req:: Usage of Vehicle Time base API has FFI :id: feat_req__time__vehicle_time_base_api_ffi :reqtype: Non-Functional :security: NO @@ -88,7 +88,7 @@ Time Synchronization * does the time increase in a monotonic manner. .. feat_req:: Reliability of Vehicle Time base accuracy qualifier - :id: feat_req__time__vehicle_time_acc_qual_reliability + :id: feat_req__time__veh_time_reliable_accur_qual :reqtype: Non-Functional :security: NO :safety: ASIL_B From 9028ded949c5e7a4e2c2bf21270b2245730ebcdc Mon Sep 17 00:00:00 2001 From: "Hornburg Bjoern (ETAS-ECM XPC-Hi)" Date: Fri, 10 Jul 2026 11:25:45 +0200 Subject: [PATCH 4/5] Rephrase notes to no mention Autosar --- docs/features/time/docs/requirements/index.rst | 2 +- docs/requirements/stakeholder/index.rst | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/features/time/docs/requirements/index.rst b/docs/features/time/docs/requirements/index.rst index 777e36e7c67..8dd7e893c9f 100644 --- a/docs/features/time/docs/requirements/index.rst +++ b/docs/features/time/docs/requirements/index.rst @@ -101,7 +101,7 @@ Time Synchronization Note: * This does not apply to willful interferences by malicious software components or components in control by malicious actors, which are out of scope of this requirement. - * The end-to-end quality of the time information provided by the time base API may require components and protocols outside of the scope of this SW-platform to be qualified accordingly (e.g. the respective time master) or at least support this requirement (e.g. time-aware bridges/switches supporting the AUTOSAR Time Synchroization Protocol). + * The end-to-end quality of the time information provided by the time base API requires components and protocols outside of the scope of this SW-platform to be qualified accordingly (e.g. the respective time master) or at least support this requirement (e.g. time-aware bridges/switches supporting end-to-end protection extensions of gPTP). .. feat_req:: Vehicle Time base time point qualifier :id: feat_req__time__vehicle_time_time_pt_qual diff --git a/docs/requirements/stakeholder/index.rst b/docs/requirements/stakeholder/index.rst index 9f4bbf19496..cab2dea1697 100644 --- a/docs/requirements/stakeholder/index.rst +++ b/docs/requirements/stakeholder/index.rst @@ -914,7 +914,7 @@ Time Note: * This does not apply to willful interferences by malicious software components or components in control by malicious actors, which are out of scope of this requirement. - * The end-to-end quality of the time information provided by the time base API may require components and protocols outside of the scope of this SW-platform to be qualified accordingly (e.g. the respective time master) or at least support this requirement (e.g. time-aware bridges/switches supporting the AUTOSAR Time Synchroization Protocol). + * The end-to-end quality of the time information provided by the time base API requires components and protocols outside of the scope of this SW-platform to be qualified accordingly (e.g. the respective time master) or at least support this requirement (e.g. time-aware bridges/switches supporting end-to-end protection extensions of gPTP). .. stkh_req:: Local High Resolution Clock API :id: stkh_req__time__high_res_clock_api From fd50b355a453a9e488d7ee571ad999a9d46eea02 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B6rn=20Hornburg?= Date: Fri, 10 Jul 2026 14:56:14 +0200 Subject: [PATCH 5/5] Apply suggestion from @ryan-steel MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Ryan Steel Signed-off-by: Björn Hornburg --- docs/features/time/docs/requirements/index.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/features/time/docs/requirements/index.rst b/docs/features/time/docs/requirements/index.rst index 8dd7e893c9f..b8cf2ad6349 100644 --- a/docs/features/time/docs/requirements/index.rst +++ b/docs/features/time/docs/requirements/index.rst @@ -68,7 +68,7 @@ Time Synchronization :status: valid :version: 1 - Usage of the vehicle time base API shall be free from interfrences for the consuming components. + Usage of the vehicle time base API shall be free from interference for the consuming components. .. feat_req:: Vehicle Time base accuracy qualifier :id: feat_req__time__vehicle_time_acc_qual_api