1. Overview and Purpose
1.1 Document Scope
This document defines the comprehensive technical requirements for the delivery and use of Virtual ECU (vECU) test instances in Software-in-the-Loop (SiL) and Hardware-in-the-Loop (HiL) testing environments. The requirements outlined herein are based on the extension of specifications for secondary (2nd) ECUs used in Electrical/Electronic (EE) software testing with virtual test instances.
1.2 Reference Documents
| Document |
Description |
| prostep ivip White Paper |
vECU level definitions and classification framework |
| LAH.000.900.BQ |
Model delivery requirements specification |
| Q-LAH |
Delivery process requirements for ECU software |
1.3 Purpose and Objectives
Primary Purpose: Define mandatory and optional requirements for vECU delivery to enable virtual verification and validation of automotive software in SiL and HiL environments.
The vECU testing framework serves the following key objectives:
- Enable virtual complete vehicle verification and validation before physical hardware availability
- Support network-level integration testing for secondary/2nd ECUs
- Provide frame-based and signal-based communication options depending on vECU level
- Ensure functional equivalence between virtual and real ECU test instances
- Standardize vECU delivery across different suppliers and testing platforms
1.4 Testing Environment Categories
| Environment |
Abbreviation |
Description |
| Software-in-the-Loop |
SiL |
Software execution on PC/generic hardware for software verification |
| Hardware-in-the-Loop |
HiL |
Real-time hardware platform with simulated environment |
| Virtual HiL |
vHiL |
Virtualized real-time environment for distributed testing |
2. vECU Level Classification
The vECU classification system is defined in the prostep ivip White Paper and provides a standardized framework for categorizing virtual ECU instances based on their level of abstraction and component fidelity.
2.1 Classification Overview
The following table presents the five vECU levels with their respective component compositions:
| Level |
Name |
Application SW |
Basic SW |
Drivers/Access |
Hardware |
| L0 |
V-ECU Controller Model |
Model |
- |
- |
- |
| L1 |
V-ECU Application Level |
Production Code |
- |
- |
- |
| L2 |
V-ECU Simulation BSW |
Production Code |
For Simulation |
- |
- |
| L3 |
V-ECU Production BSW |
Production Code |
Production Code |
- |
- |
| L4 |
V-ECU Target Binary |
Binary Code |
Binary Code |
Binary Code |
Binary Code |
2.2 Level Descriptions
Level 0 - V-ECU Controller Model
Pure behavioral model representation of the ECU controller. This level contains only a mathematical model of the control logic without production code. Used for concept validation and algorithm development in early development phases.
Level 1 - V-ECU Application Level
OPTIONAL: This level contains production application software (ASW) code while omitting basic software (BSW). Communication is signal-based, and the level is suitable for applications where BSW behavior is not critical or will be provided separately.
Level 2 - V-ECU Simulation BSW
Production ASW code combined with simulation basic software. The BSW components are replaced with simulation-capable equivalents that mimic the interface behavior while enabling higher execution speed. This level represents a transitional approach.
Level 3 - V-ECU Production BSW
PRIMARY REQUIREMENT (MANDATORY): This level contains complete production code for both application software and basic software. The vECU provides frame-based communication (full PDU) and complete diagnostic stack functionality. This is the preferred level for comprehensive virtual verification.
Level 4 - V-ECU Target Binary
Complete binary-level representation of the production ECU, including all drivers and hardware abstraction. This level provides the highest fidelity but may have limitations in execution speed and flexibility due to hardware-specific dependencies.
2.3 Level Selection Criteria
| Criteria |
Level 1 |
Level 3 |
| Simulation Speed |
Higher |
Lower |
| Functional Fidelity |
Application only |
Full stack |
| Diagnostic Coverage |
Limited |
Complete |
| Integration Effort |
Lower |
Higher |
| Communication Mode |
Signal-based |
Frame-based (PDU) |
3. vECU Level Architecture
The following architecture diagram illustrates the progression from Level 0 (pure model) to Level 4 (full binary), showing which components are included at each level and their typical use cases.
Figure 3.1: vECU Level Architecture Progression
graph TB
subgraph L0["Level 0: V-ECU Controller Model"]
L0_ASW["Application Software
Behavioral Model"]
L0_USE["Use Case: Concept Validation"]
end
subgraph L1["Level 1: V-ECU Application Level"]
L1_ASW["Application Software
Production Code"]
L1_MID["Middleware
(Optional)"]
L1_SIGNAL["Signal-Based
Communication"]
L1_USE["Use Case: ASW Testing"]
end
subgraph L2["Level 2: V-ECU Simulation BSW"]
L2_ASW["Application Software
Production Code"]
L2_BSW_SIM["Basic Software
Simulation"]
L2_SIGNAL["Signal-Based
Communication"]
L2_USE["Use Case: Integration Testing"]
end
subgraph L3["Level 3: V-ECU Production BSW"]
L3_ASW["Application Software
Production Code"]
L3_BSW_PROD["Basic Software
Production Code"]
L3_FRAME["Frame-Based
Full PDU"]
L3_DIAG["Complete Diagnostic
Stack"]
L3_USE["Use Case: Full Stack Verification"]
end
subgraph L4["Level 4: V-ECU Target Binary"]
L4_ALL["Complete Binary Stack
All Components"]
L4_HW["Hardware Abstraction"]
L4_DRIVERS["Binary Drivers"]
L4_USE["Use Case: Binary Replication"]
end
L0 --> L1
L1 --> L2
L2 --> L3
L3 --> L4
style L3 fill:#FF9800,stroke:#E65100,stroke-width:3px
style L1 fill:#2196F3,stroke:#0D47A1,stroke-width:2px
3.1 Component Breakdown per Level
| Component Type |
L0 |
L1 |
L2 |
L3 |
L4 |
| Application Software |
Model |
Production |
Production |
Production |
Binary |
| Basic Software |
- |
- |
Simulation |
Production |
Binary |
| Drivers |
- |
- |
- |
- |
Binary |
| Communication |
N/A |
Signal |
Signal |
Frame (PDU) |
Frame |
| Diagnostic |
- |
Limited |
Partial |
Complete |
Complete |
3.2 Use Case Mapping
| vECU Level |
Primary Use Cases |
Testing Environment |
| Level 0 |
Algorithm development, concept validation, function prototyping |
Desktop simulation |
| Level 1 |
ASW unit testing, software integration, hybrid HiL testing |
SiL, Hybrid HiL |
| Level 2 |
Integration testing, bus communication validation |
SiL, HiL |
| Level 3 |
Full vehicle validation, network integration, diagnostic testing |
SiL, HiL, vHiL |
| Level 4 |
Binary equivalence testing, hardware replacement |
HiL |
4. Required vECU Delivery Levels
This section defines the mandatory and optional vECU delivery levels based on testing requirements and integration scenarios.
4.1 Level 3 vECU - PRIMARY REQUIREMENT
MANDATORY: Full Production Stack Delivery
Level 3 vECU is the primary requirement for all virtual ECU deliveries and must include:
- Full Production Code: Complete application software AND basic software in production quality
- Frame-based Communication: Full PDU communication over CAN, FlexRay, and Ethernet bus systems
- Complete Diagnostic Stack: All diagnostic functions activated or activatable by default
- Parameterization Capability: Must be parameterizable with identical tools as real ECU
Required Use Cases for Level 3:
| Use Case |
Description |
| Virtual Complete Vehicle Verification |
Full vehicle network simulation with all ECUs represented |
| Validation Testing |
System-level validation before hardware availability |
| Diagnostic System Testing |
Complete diagnostic workflow validation |
| Network Integration Testing |
Frame-based communication with restbus simulation |
4.2 Level 1 vECU - OPTIONAL
OPTIONAL: Application-Only Delivery
Level 1 vECU is optional and may be delivered when specific conditions are met:
- Production Code: Application software only (no BSW)
- Signal-based Communication: Signal-level interface with bus networks
- Middleware: May include middleware components (boundary to Level 2 not exact)
- Coordination Required: Must be individually coordinated with virtual test house
Benefits of Level 1 vECU:
| Benefit |
Description |
| Higher Simulation Speed |
Reduced complexity enables faster execution cycles |
| Simpler Integration |
Easier integration on Hybrid HiL platforms |
| Lower Resource Usage |
Reduced memory and processing requirements |
4.3 Level Selection Decision Matrix
| Requirement |
Level 1 |
Level 3 |
| Complete diagnostic stack |
Not required |
Required |
| Frame-based PDU communication |
Not required |
Required |
| Signal-based communication acceptable |
Yes |
No |
| Real-time performance critical |
Yes |
Consider Level 1 |
| Full vehicle simulation |
Not sufficient |
Required |
5. Level 3 vECU Format Requirements
Level 3 vECU must be delivered in formats that ensure maximum compatibility with target simulation environments while maintaining functional equivalence to production ECUs.
5.1 Primary Delivery Formats
| Format |
Platform |
Status |
| Windows-Silver.dll |
Windows 11 |
PRIMARY - Mandatory |
| Linux 64-bit Silver-vECU |
Linux |
Optional |
| Vector SIL Kit Participant |
Windows/Linux |
Fallback if Silver.dll not possible |
5.2 Functional Requirements
Communication Requirements
Frame-based Bus Signal Communication (Mandatory)
- Full PDU communication capability
- Complete interaction with restbus simulation
- Communication with other vECU instances
| Bus Type |
Communication Mode |
Requirement |
| CAN |
Frame-based (full PDU) |
Mandatory |
| FlexRay |
Frame-based (full PDU) |
Mandatory |
| Ethernet |
Frame-based (full PDU) |
Mandatory |
Parameterization Requirements
- Must enable parameterization with identical tools as real ECU
- Must load pre-simulation calibration (e.g., DCM files)
- XCP interface for "Live changes" during simulation
- All internal measurement signals accessible
- Signal naming: Identical to real ECU measurement signal names
- Interface: Same as real ECU (e.g., XCP)
5.3 Diagnostic Requirements
Complete Diagnostic Stack (Mandatory)
- Complete software stack of all diagnostic functions
- All diagnostics activated or activatable by default
- Identical tool landscape as real vehicle diagnostics (SiL environment)
- Diagnostic access via standard diagnostic protocols
5.4 XCP Interface Requirements
| Feature |
Requirement |
| XCP interface presence |
Mandatory - Same as real ECU |
| Live changes during simulation |
Required via XCP |
| Signal naming equivalence |
Identical to real ECU |
| Calibration tool compatibility |
Same tools as real ECU |
5.5 Signal Access Requirements
- All internal measurement signals accessible
- Signal names must match real ECU exactly
- Real-time signal monitoring capability
- Signal logging and tracing support
6. Level 1 vECU Format Requirements
Level 1 vECU provides application-only software delivery with signal-based communication, suitable for scenarios where higher simulation speed is required and full BSW functionality is not critical.
6.1 Primary Delivery Formats
| Format |
Platform |
License |
Status |
| FMI 3.0 FMU (Co-Simulation) |
Windows 11 + Linux |
License-free |
PRIMARY |
| Synopsys Silver vECU (L1/2) signal-based |
Windows 11 + Linux |
- |
Fallback 1 |
| Vector SIL Kit Participant (signal-based) |
Any |
Open-source |
Fallback 2 |
6.2 FMI 3.0 Requirements
FMI 3.0 FMU Requirements (Mandatory)
- FMU for Co-Simulation (minimum FMI 3.0)
- Must be license-free executable
- XCP interface via FMI 3.0 LS-XCP (mandatory if real ECU has XCP)
- Windows 11 binaries required
- Linux 64-bit binaries optional
6.3 Level 1 Communication Requirements
| Bus Type |
Communication Mode |
Requirement |
| CAN |
Signal-based |
Mandatory |
| FlexRay |
Signal-based |
Mandatory |
| Ethernet |
Signal-based |
Mandatory |
6.4 FMI Interface Specifications
| Parameter |
Specification |
| FMI Standard |
3.0 (minimum) |
| Interface Type |
Co-Simulation FMU |
| XCP Support |
Via FMI 3.0 LS-XCP |
| Platform Support |
Windows 11 (required), Linux 64-bit (optional) |
| License Requirement |
License-free execution |
6.5 Level 1 vs Level 3 Format Differences
| Aspect |
Level 1 |
Level 3 |
| Interface Standard |
FMI 3.0 FMU |
Silver.dll / SIL Kit |
| Communication |
Signal-based |
Frame-based (PDU) |
| XCP Implementation |
Via FMI LS-XCP |
Native XCP |
| BSW Content |
None |
Full Production BSW |
7. Real-Time HIL Integration Requirements
Real-Time Hardware-in-the-Loop (RT-HiL) systems require specific technical configurations to ensure deterministic execution and compatibility with timing constraints.
7.1 Target System Parameters
| Software Release |
2024a |
| Architecture |
x86_64 |
| Operating System |
Linux 64-bit as Shared Object (.so) |
| FMI Standard |
FMI 3.0 with LS-XCP support |
| FMI Fallback |
FMI 2.0 (if FMI 3.0 not achievable) |
| Compiler |
gcc 11 or lower (or Cross-Compiler 10.4) |
| glibc Version |
2.35 or lower |
| gcc-runtime |
13.2 or lower (if relevant) |
7.2 Real-Time Timing Requirements
Critical Timing Parameters
| Time Raster |
1ms for real-time simulation |
| Turnaround Time |
50% of available time per calculation step (maximum) |
| Calculation Step |
1ms = 1000 microseconds |
| Maximum vECU Execution Time |
500 microseconds (50% of 1ms step) |
| Remaining Budget |
500 microseconds for other tasks |
7.3 Compiler and Runtime Requirements
| Component |
Version Constraint |
Notes |
| gcc Compiler |
11 or lower |
Must be compatible with target HiL system |
| Cross-Compiler |
10.4 |
Alternative to gcc 11 |
| glibc |
2.35 or lower |
System C library |
| gcc-runtime |
13.2 or lower |
C++ runtime library |
7.4 FMI 3.0 LS-XCP Requirements
- Mandatory for real-time calibration during HiL simulation
- LS-XCP (Layered Services XCP) must be supported via FMI 3.0 interface
- Enables measurement and calibration without stopping simulation
- Provides access to internal variables and parameters
7.5 Shared Object Delivery
Note: Linux 64-bit delivery as Shared Object (.so) is required for RT-HiL integration. This enables dynamic loading by the HiL real-time executive while maintaining deterministic execution characteristics.
8. vHIL Architecture
The Virtual Hardware-in-the-Loop (vHIL) architecture provides a framework for distributed real-time testing with virtual ECU instances.
Figure 8.1: vHIL System Architecture
graph TB
subgraph RT_HIL["Real-Time HiL System"]
subgraph EXECUTIVE["Real-Time Executive"]
TIME_MGMT["Time Management
1ms Raster"]
TASK_SCHED["Task Scheduler"]
end
subgraph FMU_CONTAINER["FMU Container"]
VECU_L3["vECU Level 3
Execution Unit"]
TURNAROUND["Turnaround Budget
50% = 500us"]
end
subgraph BUS_SIM["Bus Simulation"]
CAN_SIM["CAN Simulator"]
FR_SIM["FlexRay Simulator"]
ETH_SIM["Ethernet Simulator"]
end
end
subgraph VIRTUAL_BUS["Virtual Bus Integration"]
SIL_KIT["Vector SIL Kit
Open-Source"]
GLOBAL_TIME["Global Virtual Time
Synchronization"]
end
subgraph VECU_INSTANCES["vECU Instances"]
VECU_1["vECU Instance 1"]
VECU_2["vECU Instance 2"]
VECU_N["vECU Instance N"]
end
subgraph RESTBUS["Restbus Simulation"]
RESTBUS_SIM["Restbus Simulation
Frame-Based"]
end
EXECUTIVE --> FMU_CONTAINER
EXECUTIVE --> BUS_SIM
TIME_MGMT --> GLOBAL_TIME
VECU_L3 --> SIL_KIT
SIL_KIT --> VECU_INSTANCES
SIL_KIT --> RESTBUS
BUS_SIM --> SIL_KIT
style RT_HIL fill:#FFF3E0,stroke:#E65100,stroke-width:2px
style VECU_L3 fill:#FF9800,stroke:#E65100,stroke-width:3px
style TURNAROUND fill:#FFEBEE,stroke:#f44336,stroke-width:2px
8.1 Architecture Components
| Component |
Function |
Requirements |
| Real-Time Executive |
System orchestration, timing control |
Deterministic scheduling, 1ms raster |
| FMU Container |
Hosting vECU instances |
FMI 3.0 compatible, real-time capable |
| Bus Simulation |
CAN/FlexRay/Ethernet simulation |
Frame-based communication, PDU handling |
| Vector SIL Kit |
Virtual bus integration |
Open-source, frame and signal support |
8.2 Timing Flow
Figure 8.2: Timing Flow per Calculation Step
gantt
title Real-Time Calculation Step (1ms)
dateFormat X
axisFormat %s us
section Calculation Step
Total Step Time :0, 1000
section vECU Execution
vECU Turnaround Budget :0, 500
section Remaining Tasks
Bus Simulation :200, 700
Other Tasks Budget :500, 1000
8.3 vHIL Integration Points
| Integration Point |
Interface |
Protocol |
| vECU to Bus Simulation |
SIL Kit Participant |
Frame-based PDU |
| vECU to Global Time |
SIL Kit Sync |
Time synchronization |
| HiL to vECU |
FMI 3.0 FMU |
Co-simulation |
| Calibration Access |
XCP via LS-XCP |
FMI 3.0 |
9. Bus Communication Requirements
Bus communication requirements differ based on vECU level, with Level 3 requiring frame-based (full PDU) communication and Level 1 using signal-based communication.
9.1 Level 3 vECU Bus Communication
MANDATORY: Frame-Based Communication for Level 3
| Bus Type |
Communication Mode |
Required |
Details |
| CAN |
Frame-based (full PDU) |
Mandatory |
Full CAN frame handling with PDU interpretation |
| FlexRay |
Frame-based (full PDU) |
Mandatory |
Full FlexRay frame handling with PDU interpretation |
| Ethernet |
Frame-based (full PDU) |
Mandatory |
Full Ethernet frame handling with PDU interpretation |
9.2 Level 1 vECU Bus Communication
| Bus Type |
Communication Mode |
Required |
Details |
| CAN |
Signal-based |
Mandatory |
Signal extraction from CAN frames |
| FlexRay |
Signal-based |
Mandatory |
Signal extraction from FlexRay frames |
| Ethernet |
Signal-based |
Mandatory |
Signal extraction from Ethernet frames |
9.3 Communication Mode Comparison
| Aspect |
Frame-Based (Level 3) |
Signal-Based (Level 1) |
| Data Unit |
Full PDU (Protocol Data Unit) |
Individual signals |
| Network Layer |
Full network stack interaction |
Signal-level abstraction |
| Bus Load Simulation |
Accurate bus load calculation |
Simplified bus behavior |
| Diagnostic Support |
Full diagnostic stack |
Limited diagnostic access |
| Integration Complexity |
Higher |
Lower |
9.4 Virtual Network Integration
Virtual Network Integration Framework:
- Vector SIL Kit for virtual bus integration (open-source)
- SIL Kit supports both frame-based (L3) and signal-based (L1) communication
- vECU must synchronize with global virtual time
- All software components must participate in time synchronization
9.5 Signal Naming Requirements
- Signal names must be identical to real ECU measurement signal names
- PDU structure must match production ECU network configuration
- Bus databases (DBC, FIBEX, ARXML) must be consistent with real ECU
10. Bus Communication Architecture
The bus communication architecture supports both Level 3 (frame-based) and Level 1 (signal-based) communication topologies.
Figure 10.1: Level 3 Frame-Based Communication Architecture
graph TB
subgraph VECU_L3["vECU Level 3"]
ASW_L3["Application Software"]
BSW_L3["Basic Software"]
PDU_LAYER["PDU Layer
Frame Processing"]
COM_STACK["Communication Stack"]
end
subgraph VIRTUAL_BUS_L3["Virtual Bus - Frame Based"]
SIL_KIT_FRAME["SIL Kit
Frame Mode"]
PDU_ROUTING["PDU Routing"]
BUS_SIM_FRAME["Bus Simulation
CAN | FlexRay | ETH"]
end
subgraph RESTBUS_L3["Restbus Simulation"]
ECU_1_L3["ECU 1 (Real)"]
ECU_2_L3["ECU 2 (Real)"]
ECU_3_L3["ECU 3 (Virtual)"]
end
ASW_L3 --> BSW_L3
BSW_L3 --> PDU_LAYER
PDU_LAYER --> COM_STACK
COM_STACK --> PDU_ROUTING
PDU_ROUTING --> SIL_KIT_FRAME
SIL_KIT_FRAME --> BUS_SIM_FRAME
BUS_SIM_FRAME --> ECU_1_L3
BUS_SIM_FRAME --> ECU_2_L3
BUS_SIM_FRAME --> ECU_3_L3
style VECU_L3 fill:#FF9800,stroke:#E65100,stroke-width:3px
style SIL_KIT_FRAME fill:#4CAF50,stroke:#2E7D32
Figure 10.2: Level 1 Signal-Based Communication Architecture
graph TB
subgraph VECU_L1["vECU Level 1"]
ASW_L1["Application Software"]
MIDDLEWARE["Middleware"]
SIGNAL_LAYER["Signal Layer"]
end
subgraph VIRTUAL_BUS_L1["Virtual Bus - Signal Based"]
SIL_KIT_SIGNAL["SIL Kit
Signal Mode"]
SIGNAL_ROUTING["Signal Routing"]
BUS_SIM_SIGNAL["Bus Simulation
CAN | FlexRay | ETH"]
end
subgraph RESTBUS_L1["Restbus Simulation"]
ECU_1_L1["ECU 1 (Real)"]
ECU_2_L1["ECU 2 (Real)"]
end
ASW_L1 --> MIDDLEWARE
MIDDLEWARE --> SIGNAL_LAYER
SIGNAL_LAYER --> SIGNAL_ROUTING
SIGNAL_ROUTING --> SIL_KIT_SIGNAL
SIL_KIT_SIGNAL --> BUS_SIM_SIGNAL
BUS_SIM_SIGNAL --> ECU_1_L1
BUS_SIM_SIGNAL --> ECU_2_L1
style VECU_L1 fill:#2196F3,stroke:#0D47A1,stroke-width:2px
style SIL_KIT_SIGNAL fill:#4CAF50,stroke:#2E7D32
10.1 Communication Stack Comparison
| Stack Layer |
Level 3 (Frame-Based) |
Level 1 (Signal-Based) |
| Application |
Production ASW |
Production ASW |
| Basic Software |
Production BSW |
None / Middleware |
| Communication |
Full COM Stack |
Signal Interface |
| PDU Processing |
Full PDU Handling |
Signal Extraction |
| Bus Access |
Frame-based |
Signal-based |
10.2 SIL Kit Configuration Options
| Mode |
Level Support |
Use Case |
| Frame Mode |
Level 3 |
Full PDU communication, diagnostic testing |
| Signal Mode |
Level 1 |
Signal-based testing, faster simulation |
| Mixed Mode |
L1 + L3 |
Hybrid testing environments |
11. SiL Simulation Requirements
Software-in-the-Loop (SiL) simulation requirements define the execution environment, configuration parameters, and functional expectations for vECU instances.
11.1 SiL Environment Requirements
Primary Simulation Platform: Synopsys Silver 2025.03 or higher
Execution Options:
- Option 1: Native execution in Silver
- Option 2: Connection via Vector SIL Kit (open-source)
11.2 Level 3 vECU SiL Requirements
| Requirement |
Specification |
| Parameterization Tools |
Identical tools as real ECU |
| Calibration Loading |
Load DCM files before simulation |
| XCP Interface |
For live changes during simulation |
| Calibration Licensing |
Independent of additional tool licenses |
11.3 Level 1 vECU SiL Requirements
| Requirement |
Specification |
| Parameter Coverage |
Every real ECU parameter configurable in vECU |
| Parameterization Timing |
Loadable in Pre-Processing or at vECU runtime |
| File Formats |
DCM and A2L file formats must be usable directly |
| Special Tools |
Must be provided to client at no additional cost |
| Simulation Models |
Open, parameterizable, license-free MATLAB/Simulink models |
11.4 Simulation Model Technical Requirements (Level 1)
Mandatory Technical Specifications
| Parameter |
Requirement |
| Minimum Model Format |
Open S-Function with C-code and parameters |
| Parameter Structure |
Parameters at highest level (no nesting in subsystems) |
| Target Platform |
Generic-Target for Windows 11 and Linux |
| Parameterization Mode |
SiL/HiL online parameterizable OR variant-specific by contractor |
| Maximum Step Size |
1ms (individually lower step sizes may be required) |
| Numerical Methods |
Discrete elements only (if numerical methods used: ode1 as reference) |
11.5 Model Delivery Standards (LAH.000.900.BQ)
Important: Model delivery requirements per LAH.000.900.BQ must be observed for all model deliveries. This includes documentation, versioning, and quality assurance requirements.
12. SiL Architecture
The SiL architecture defines the component structure and data flow for Software-in-the-Loop testing with virtual ECU instances.
Figure 12.1: SiL System Architecture
graph TB
subgraph TEST_FRAMEWORK["Test Framework"]
TEST_ORCH["Test Orchestration"]
TEST_DATA["Test Data
Management"]
RESULT_COLL["Result
Collection"]
end
subgraph SIL_ENV["SiL Environment - Silver 2025.03+"]
subgraph VECU_CONTAINER["vECU Container"]
VECU_L3_A["vECU Level 3A"]
VECU_L3_B["vECU Level 3B"]
VECU_L1["vECU Level 1"]
end
subgraph SIL_KIT["Vector SIL Kit"]
FRAME_MODE["Frame Mode
L3"]
SIGNAL_MODE["Signal Mode
L1"]
end
end
subgraph VIRTUAL_BUS["Virtual Bus"]
RESTBUS["Restbus
Simulation"]
BUS_MON["Bus
Monitoring"]
end
subgraph PERIPHERALS["Peripheral Models"]
SENSOR_MOD["Sensor
Models"]
ACTUATOR_MOD["Actuator
Models"]
ENV_MOD["Environment
Models"]
end
TEST_ORCH --> SIL_ENV
SIL_ENV --> VIRTUAL_BUS
VIRTUAL_BUS --> RESTBUS
SIL_ENV --> PERIPHERALS
TEST_DATA --> TEST_ORCH
RESULT_COLL --> TEST_ORCH
style SIL_ENV fill:#FFF3E0,stroke:#E65100,stroke-width:2px
style VECU_CONTAINER fill:#FF9800,stroke:#E65100,stroke-width:3px
style SIL_KIT fill:#4CAF50,stroke:#2E7D32
12.1 Component Responsibilities
| Component |
Responsibilities |
| Test Framework |
Test orchestration, data management, result collection, report generation |
| vECU Container |
Hosting vECU instances (L1 and L3), lifecycle management |
| Vector SIL Kit |
Virtual bus integration, frame/signal mode support, time synchronization |
| Restbus Simulation |
Simulating remaining bus traffic, ECU models for non-tested components |
| Peripheral Models |
Sensor/actuator behavior models, environment simulation |
Figure 12.2: SiL Data Flow
flowchart LR
A[Test Cases] --> B[Test Orchestration]
B --> C[vECU Instance]
C --> D{SIL Kit}
D --> E[CAN Bus Sim]
D --> F[FlexRay Bus Sim]
D --> G[Ethernet Bus Sim]
E --> H[Restbus]
F --> H
G --> H
H --> I[Bus Monitor]
C --> J[Peripheral Models]
J --> C
I --> K[Results]
C --> K
12.2 Integration Patterns
| Pattern |
Description |
Use Case |
| Native Silver |
vECU executes directly in Silver environment |
Single vECU testing |
| SIL Kit Bridge |
vECU connects via SIL Kit middleware |
Multi-vECU testing |
| FMU Import |
Level 1 vECU as FMI FMU in Silver |
Signal-based testing |
13. Calibration and Parameterization Requirements
Calibration and parameterization capabilities enable fine-tuning of vECU behavior and adaptation to different vehicle configurations without code changes.
13.1 Level 3 vECU Calibration
| Requirement |
Detail |
| Tool Compatibility |
Same tools as real ECU |
| Pre-simulation Calibration |
Load DCM files before simulation |
| Live Changes |
XCP interface during simulation |
| License-free Calibration |
No additional licenses required |
13.2 Level 1 vECU Calibration
| Requirement |
Detail |
| Full Parameter Coverage |
All real ECU parameters accessible |
| Timing |
Pre-Processing or runtime loading |
| File Formats |
DCM, A2L preferred |
| Special Tools |
Must be provided to client free of charge |
| Parameterization Mode |
Variant-specific delivery acceptable |
13.3 XCP Measurement and Calibration Requirements
| Feature |
Level 3 |
Level 1 |
| XCP Interface |
Mandatory (same as real ECU) |
Via FMI 3.0 LS-XCP |
| Live Changes |
Yes, via XCP |
Yes, via LS-XCP |
| Signal Naming |
Identical to real ECU |
- |
| Calibration Tool |
Same as real ECU |
Free tool provided |
| A2L Support |
Standard A2L |
Direct A2L or converted |
13.4 Calibration File Formats
| Format |
Full Name |
Purpose |
Level 3 |
Level 1 |
| DCM |
Diagnostic Calibration |
Calibration data |
Yes |
Yes |
| A2L |
ASAP2 Measurement |
Parameter description |
Yes |
Yes |
| MAP |
Parameter Map |
Array parameters |
Optional |
Yes |
13.5 Calibration Workflow
Figure 13.1: Calibration Workflow
flowchart TD
A[Load DCM File] --> B[Parse Calibration Data]
B --> C[Apply to vECU]
C --> D{Level Type}
D -->|Level 3| E[XCP Direct Access]
D -->|Level 1| F[FMI LS-XCP]
E --> G[Live Parameter Adjustment]
F --> G
G --> H[Verify Parameter Change]
H --> I[Save Updated Calibration]
I --> J[A2L Update]
14. Debug and Trace Capabilities
Debug and trace capabilities enable verification, troubleshooting, and performance analysis of vECU execution in simulation environments.
14.1 Level 3 vECU Debug Capabilities
Full Debug Infrastructure (Mandatory)
- All internal measurement signals accessible
- Signal names IDENTICAL to real ECU measurement signal names
- Interface IDENTICAL to real ECU (e.g., XCP)
- Diagnostic extracts via SiL with same tool landscape as real vehicle
| Debug Feature |
Availability |
Interface |
| Internal Signals |
All accessible |
XCP |
| Real-time Monitoring |
Yes |
XCP |
| Breakpoints |
Yes |
XCP/ Debug API |
| Variable Modification |
Live changes |
XCP |
| Diagnostic Access |
Full stack |
UDS/OBD |
14.2 Level 1 vECU Debug Capabilities
- XCP interface mandatory if real ECU has XCP
- Integration via FMI 3.0 LS-XCP
- Limited signal access compared to Level 3
| Debug Feature |
Level 1 Support |
Interface |
| Signals |
Via FMI parameters |
FMI 3.0 |
| XCP Access |
LS-XCP |
FMI 3.0 LS-XCP |
| Real-time Monitoring |
Yes |
LS-XCP |
14.3 Trace Capabilities
| Trace Type |
Level 3 |
Level 1 |
| Signal Trace |
All internal signals |
Exposed parameters |
| Bus Trace |
Frame-based |
Signal-based |
| Diagnostic Trace |
Full diagnostic |
Limited |
| Timing Trace |
Execution timing |
Execution timing |
14.4 Signal Naming Consistency
Critical Requirement: Signal names in vECU must be identical to real ECU measurement signal names to ensure:
- Consistent test specification across SiL and HiL
- Reuse of existing calibration and measurement tools
- Traceability between virtual and physical testing
15. Functional Equivalence Verification
Functional equivalence verification ensures that vECU instances exhibit behavior equivalent to real ECUs within defined tolerances and test scenarios.
15.1 Acceptance Testing Requirements
MANDATORY: ECU Test Catalog Execution
ECU test catalog (acceptance test) must be executed BEFORE vECU delivery
Test Methods:
| Method |
Description |
Status |
| OpenLoop Tests |
Standard verification method with known inputs and expected outputs |
Standard |
| ClosedLoop Tests |
Client-provided closed-loop environment for validation |
Optional (individually coordinated) |
15.2 Test Specification Requirements
Contractor Responsibilities:
- Must provide test specification with:
- Pre-condition: Initial state and configuration
- Action: Input stimulus or trigger
- Expected result: Definitive pass/fail criteria
- Tests shall use interface signals only
- Test cases must be documented and handed over
15.3 Test Execution Requirements
| Phase |
Executor |
Deliverable |
| Initial Testing |
Contractor |
Reproducible proof of quality |
| Verification |
Client |
Test execution reports |
| Handover |
Contractor |
Test specifications, procedures |
15.4 Model Delivery Requirements
Reference: LAH.000.900.BQ model delivery requirements must be observed for all model deliveries. This includes:
- Model documentation standards
- Version control procedures
- Quality assurance checkpoints
- Handover documentation
15.5 Test Coverage Requirements
| Coverage Type |
Minimum Requirement |
| Functional Coverage |
100% of specified functions tested |
| Interface Coverage |
100% of interface signals exercised |
| Diagnostic Coverage |
All diagnostic services tested (Level 3) |
| Bus Communication |
All defined messages transmitted/received |
16. Functional Equivalence Architecture
The functional equivalence architecture provides a framework for comparing vECU behavior against real ECU specifications.
Figure 16.1: Functional Equivalence Verification Flow
flowchart TD
A[Real ECU Behavior
Specification] --> B[Test Specification
Definition]
B --> C[OpenLoop Test Catalog]
C --> D{Test Execution}
D -->|Virtual| E[vECU Instance]
D -->|Reference| F[Reference ECU
or Model]
E --> G[Virtual Test
Results]
F --> H[Reference Test
Results]
G --> I{Comparison}
H --> I
I -->|Pass| J[Equivalence
Certified]
I -->|Fail| K[Delta Analysis]
K --> L[Issue Documentation]
L --> M[Remediation
Required]
M --> B
style C fill:#FFF3E0,stroke:#E65100
style J fill:#4CAF50,stroke:#2E7D32
style K fill:#FF9800,stroke:#E65100
16.1 Verification Components
| Component |
Function |
| Real ECU Specification |
Baseline behavior definition |
| Test Specification |
Pre-condition, action, expected result definitions |
| OpenLoop Test Catalog |
Standardized test suite for equivalence verification |
| Comparison Engine |
Automated vECU vs reference comparison |
| Delta Analysis |
Quantification of behavioral differences |
Figure 16.2: Equivalence Test Execution Architecture
graph TB
subgraph TEST_ENV["Test Environment"]
subgraph INPUT["Input Generation"]
STIMULI["Test Stimuli
Signals/Frames"]
TIMING["Timing Control"]
end
subgraph DUT["Device Under Test"]
VECU["vECU Instance"]
MONITOR["Behavior Monitor"]
end
subgraph COMPARE["Comparison"]
ACTUAL["Actual Output"]
EXPECTED["Expected Output"]
DIFF["Difference
Analyzer"]
end
end
INPUT --> DUT
DUT --> COMPARE
STIMULI --> EXPECTED
MONITOR --> ACTUAL
ACTUAL --> DIFF
EXPECTED --> DIFF
style DUT fill:#FF9800,stroke:#E65100,stroke-width:3px
style DIFF fill:#f44336,stroke:#B71C1C
16.2 Acceptance Criteria
| Criteria |
Threshold |
Measurement |
| Functional Match |
100% |
Test case pass rate |
| Timing Accuracy |
Within 1ms |
Response time delta |
| Signal Accuracy |
Identical naming |
Signal mapping verification |
| Diagnostic Equivalence |
100% services |
Diagnostic test coverage |
17. Delivery Requirements
Delivery requirements ensure timely and comprehensive provision of vECU artifacts to support testing activities.
17.1 Timing Requirements
CRITICAL TIMING CONSTRAINT
vECU delivery must occur BEFORE or AT THE SAME TIME as real ECU software provision
- All release software stocks and special versions must be delivered
- Same delivery process as real ECU software per Q-LAH
- Version nomenclature must match real ECU software
17.2 Documentation Requirements
| Document |
Content |
| Version Info |
Same nomenclature as real ECU software |
| Differences to Real ECU |
Which libs differ, what doesn't work |
| Acceptance Test Results |
Report of OpenLoop test execution |
| Calibration Instructions |
How to perform calibration changes |
| Configuration Options |
All vECU-specific parameters listed |
| Static Good Values |
Bus signal "good values" list |
17.3 Change Management Requirements
Documented Changes (Mandatory)
- Changes to function logics must be documented
- Model parameter changes must be documented
- Changelog required from contractor
Required Change Documentation:
| Documentation Item |
Description |
| Interface Diffs |
Diffs to input and output interfaces |
| Function Descriptions |
New/modified/removed functions detailed |
| Parameterization Diffs |
Changes to parameterization files documented |
| Behavioral Changes |
Functional behavior modifications listed |
17.4 Delivery Package Contents
| Category |
Items |
| vECU Binaries |
Platform-specific executables (Windows DLL, Linux SO) |
| Configuration Files |
Bus databases, network descriptions, calibration files |
| Documentation |
User guides, API documentation, release notes |
| Test Artifacts |
Test specifications, acceptance test results |
| Support Files |
Tools, utilities, sample configurations |
18. Tool Compatibility Matrix
The tool compatibility matrix defines required tool versions, platforms, and purposes for vECU integration and testing.
18.1 Primary Simulation Environment
| Tool |
Version |
Purpose |
Platform |
| Synopsys Silver |
2025.03 or higher |
SiL simulation environment |
Windows 11, Linux |
18.2 Integration Middleware
| Tool |
Type |
Purpose |
Platform |
| Vector SIL Kit |
Open-source |
Virtual bus integration |
Any |
18.3 Standards and Interfaces
| Standard |
Version |
Purpose |
Notes |
| FMI Standard |
3.0 (2.0 fallback) |
FMU interface standard |
Co-Simulation mode required |
| FMI LS-XCP |
FMI 3.0 feature |
XCP via FMI |
Mandatory for XCP access in FMI |
| XCP |
Per ECU spec |
Measurement and calibration |
Same as real ECU |
18.4 Calibration and Diagnostic Files
| File Type |
Format |
Purpose |
Level 3 |
Level 1 |
| DCM |
Per ECU spec |
Calibration data files |
Required |
Preferred |
| A2L |
Per ECU spec |
Parameter description |
Required |
Preferred |
18.5 Model Development Framework
| Tool |
Version |
Purpose |
Notes |
| MATLAB/Simulink |
Generic-Target |
Open model framework |
Required for Level 1 models |
| C Compiler |
gcc 11 or lower |
Model compilation |
RT-HiL target |
18.6 Version Compatibility Summary
| Component |
Minimum Version |
Recommended |
Notes |
| Synopsys Silver |
2025.03 |
Latest |
Primary simulation platform |
| FMI |
2.0 |
3.0 |
3.0 required for LS-XCP |
| gcc |
11 |
11 |
RT-HiL compilation |
| glibc |
2.35 |
2.35 |
System compatibility |
19. Migration Path
The migration path defines the journey from physical ECU development to virtual ECU delivery and integration.
Figure 19.1: Physical to Virtual ECU Migration Path
flowchart LR
A[Physical ECU
Development] --> B[Real ECU
Software Release]
B --> C{vECU Level
Selection}
C -->|Level 3| D[vECU Level 3
Development]
C -->|Level 1| E[vECU Level 1
Development]
D --> F[Functional
Equivalence Testing]
E --> F
F --> G{Test Results}
G -->|Pass| H[Acceptance
Certification]
G -->|Fail| I[Remediation
Loop]
I --> D
I --> E
H --> J[Delivery
Package Prep]
J --> K[vECU
Delivery]
K --> L[Client
Integration]
L --> M[SiL/HiL
Testing]
M --> N[Virtual Validation
Complete]
style A fill:#9E9E9E,stroke:#616161
style B fill:#9E9E9E,stroke:#616161
style H fill:#4CAF50,stroke:#2E7D32
style K fill:#FF9800,stroke:#E65100
19.1 Migration Phase Description
| Phase |
Activities |
Deliverables |
| Physical ECU Development |
Production code development, BSW integration |
ECU software, documentation |
| Level Selection |
Determine vECU level based on test requirements |
Level selection document |
| vECU Development |
Convert/adapt code for virtual execution |
vECU binaries, configurations |
| Equivalence Testing |
Execute OpenLoop test catalog |
Test results, delta analysis |
| Acceptance |
Client review and certification |
Acceptance report |
| Delivery |
Package preparation, handover |
Delivery package |
| Integration |
Client-side integration, testing |
Integrated test results |
19.2 Timing Constraints
Critical Constraint: Delivery Timing
vECU delivery must occur BEFORE or AT THE SAME TIME as real ECU software provision
| Scenario |
Timing Requirement |
Risk Level |
| Early Delivery |
vECU before real ECU |
Low (preferred) |
| Simultaneous |
vECU with real ECU |
Medium |
| Late Delivery |
vECU after real ECU |
High (not acceptable) |
Figure 19.2: Delivery Timing Diagram
gantt
title vECU vs Real ECU Delivery Timeline
dateFormat YYYY-MM-DD
axisFormat %d
section Development
Real ECU Development :2026-01-01, 2026-04-01
vECU Development :2026-01-15, 2026-04-01
section Delivery
Real ECU Delivery :2026-04-01, 2026-04-02
vECU Delivery :2026-03-30, 2026-04-01
section Testing
vECU Testing :2026-04-02, 2026-06-01
Integration Testing :2026-04-15, 2026-06-15
20. Real-Time Performance Budget
Real-time performance budgeting ensures deterministic execution of vECU instances within hard real-time constraints of HiL systems.
20.1 Time Budget Overview
Fundamental Timing Constraint: 50% Turnaround Budget
vECU execution must complete within 50% of available time per calculation step to leave adequate budget for other system tasks.
20.2 Time Budget Breakdown
| Calculation Step Size |
1 millisecond (1ms) |
| Total Available Time |
1000 microseconds (us) |
| vECU Turnaround Budget |
500 microseconds (50% of 1ms) |
| Remaining System Budget |
500 microseconds (50% of 1ms) |
Figure 20.1: Real-Time Performance Budget Distribution
pie title Calculation Step Time Budget (1ms = 1000us)
"vECU Execution" : 50
"System Tasks" : 50
Figure 20.2: Timing Budget per Calculation Cycle
gantt
title Real-Time Calculation Step Timeline
dateFormat X
axisFormat %s us
section Step Start
Step Boundary :0, 0
section vECU Budget
vECU Init :0, 50
vECU Execute :50, 400
vECU Finalize :400, 500
section System Budget
Bus Simulation :100, 600
Task Switch :600, 700
Other Tasks :700, 1000
section Step End
Step Boundary :1000, 1000
20.3 Performance Requirements by Level
| Level |
Expected Complexity |
Typical Budget Usage |
Risk |
| Level 1 |
Lower (ASW only) |
20-30% |
Low |
| Level 3 |
Higher (Full stack) |
40-50% |
Medium |
| Level 4 |
Highest (Binary) |
Variable |
High |
20.4 Execution Time Measurement
| Measurement Point |
Description |
| Start Time |
Beginning of vECU execution slot |
| End Time |
Return of control to executive |
| Turnaround Time |
End Time minus Start Time |
| Budget Utilization |
Turnaround Time / 500us * 100% |
20.5 Worst-Case Budget Scenarios
| Scenario |
Expected Time |
Notes |
| Typical Execution |
200-400 us |
Normal operation |
| Peak Load |
450-500 us |
Maximum allowed |
| Budget Exceeded |
>500 us |
Real-time deadline miss |
Warning: If vECU consistently approaches or exceeds 500us turnaround budget, consider:
- Level reduction (L3 to L1) for timing-critical tests
- Code optimization or offloading to dedicated cores
- Reducing simulation fidelity in non-critical paths
21. Summary and Conclusions
21.1 Key Requirements Summary
| Category |
Primary Requirement |
| vECU Level |
Level 3 (Full Production Stack) - Mandatory |
| Communication |
Frame-based PDU for Level 3, Signal-based for Level 1 |
| Delivery Format |
Windows Silver.dll (L3), FMI 3.0 FMU (L1) |
| Simulation Platform |
Synopsys Silver 2025.03+ |
| Real-Time Budget |
500us turnaround per 1ms step (50%) |
| Verification |
OpenLoop test catalog before delivery |
21.2 Level 3 vs Level 1 Comparison
| Aspect |
Level 3 (Primary) |
Level 1 (Optional) |
| BSW Content |
Full Production BSW |
None |
| Communication |
Frame-based (PDU) |
Signal-based |
| Diagnostic Stack |
Complete |
Limited |
| Delivery Format |
Silver.dll |
FMI 3.0 FMU |
| Execution Speed |
Lower |
Higher |
| Tool Compatibility |
Same as real ECU |
Special tools provided |
21.3 Critical Success Factors
- Timely Delivery: vECU must be delivered before or simultaneously with real ECU
- Functional Equivalence: All tests must pass with behavior matching real ECU
- Performance Compliance: Real-time budget adherence (50% turnaround)
- Complete Documentation: All differences, configurations, and tools documented
- Signal Naming: Identical signal names to enable test reuse
21.4 Recommendations
- Prioritize Level 3 delivery for comprehensive testing coverage
- Consider Level 1 for early-stage development and speed-critical tests
- Ensure early engagement with vECU development team for timeline alignment
- Establish clear acceptance criteria based on this specification
- Plan for iterative refinement based on test results and feedback
Document Reference: This specification is based on the extension of requirements for 2nd ECUs for EE/SW testing with virtual test instances, referencing the prostep ivip White Paper on vECU level definitions.