
Model-Based Testing in Embedded Automotive Systems 565
level. Both calculated output signals are provided to the rest of the vehicle system through
a LIN interface of this ECU. Even for such a simple system, determination of the correct
responses for various possible input signal combinations is not easy, but it is a necessity for
proving that the ECU correctly implements the algorithm.
In addition to the fuel level calculation, which is the main function of this system,
there are other functions that must be tested as well but that have been eliminated in the
example since they are not modeled at all (LIN communication protocol, diagnostic proto