System Architecture

flowchart LR
  subgraph Vehicle["Vehicle / drivetrain domain"]
    Drivetrain["GW AMT drivetrain"]
    Network["Vehicle network (CAN / PWM)"]
  end
  subgraph ECA["ECA ECU domain"]
    App["Clutch actuation application"]
    Sec["Security services"]
    Boot["Bootloader / update logic"]
  end
  subgraph Diagnostic["Diagnostic / service domain"]
    Tester["Diagnostic tester"]
  end
  subgraph OEM["OEM backend / security operations domain"]
    Backend["Update and evidence backend"]
    PKI["Key and certificate provisioning"]
    SecOps["Security operations"]
  end
  subgraph Supplier["Supplier engineering domain"]
    Engineering["Supplier ALM / CI / evidence"]
  end
  Drivetrain --> Network
  Network <-->|commands, status, freshness| App
  Tester -->|authenticated UDS| Sec
  Backend -->|signed software / IVD| Boot
  PKI -->|trust material| Sec
  Boot --> App
  Sec --> App
  App -->|events| SecOps
  Engineering -->|software and evidence| Backend

flowchart LR
  subgraph Capabilities["System capabilities"]
    Actuation["Clutch actuation"]
    Diagnostics["Secure diagnostics"]
    UpdateCap["Secure update"]
    Keys["Key and certificate handling"]
    Evidence["Cybersecurity evidence"]
  end
  subgraph Components["Architecture components"]
    App["Application software"]
    DiagSrv["Diagnostic server"]
    Boot["Bootloader / update logic"]
    Sec["Security services"]
    Tooling["Engineering evidence toolchain"]
  end
  Actuation --> App
  Diagnostics --> DiagSrv
  Diagnostics --> Sec
  UpdateCap --> Boot
  UpdateCap --> Sec
  Keys --> Sec
  Evidence --> Tooling
  Evidence --> Sec

flowchart TB
  subgraph ECU["ECA ECU trust boundary"]
    App["Application software"]
    Sec["Security services"]
    Boot["Bootloader / update logic"]
  end
  Vehicle["Vehicle network boundary"] -->|CAN / PWM / protected data| App
  Tester["Diagnostic service boundary"] -->|UDS Auth 0x29| Sec
  Backend["OEM backend boundary"] -->|signed update / logs| Boot
  PKI["PKI provisioning boundary"] -->|keys / certificates| Sec
  Tooling["Supplier engineering boundary"] -->|software / evidence| Backend
  App -->|security events| Backend

flowchart LR
  subgraph Protect["Protected areas"]
    Data["Vehicle data"]
    Software["ECU software"]
    Diag["Diagnostic access"]
    Trust["Keys and certificates"]
    Evidence["Security evidence"]
  end
  subgraph Capabilities["Security capabilities"]
    Comms["Secure communication"]
    UpdateSec["Secure update"]
    RBAC["Diagnostics RBAC"]
    KeyMgmt["Key / certificate management"]
    Audit["Logging and evidence"]
  end
  Comms --> Data
  UpdateSec --> Software
  RBAC --> Diag
  KeyMgmt --> Trust
  Audit --> Evidence

sequenceDiagram
  participant Tester as Diagnostic Tester
  participant Sec as ECA Security Services
  participant Boot as Bootloader / Update Logic
  participant App as Clutch Actuation Application
  participant Backend as OEM Update Backend
  Tester->>Sec: Start UDS session and authenticate
  Sec-->>Tester: Authorized diagnostic role
  Backend->>Boot: Signed software package and IVD
  Boot->>Sec: Validate signature, certificate and integrity
  Sec-->>Boot: Validation result
  Boot->>App: Activate accepted software
  App-->>Tester: Status, DTCs and update result

flowchart LR
  OEMPKI["OEM / TRATON PKI"] -->|certificate profile and trust anchors| Provisioning["Provisioning process"]
  Supplier["Supplier engineering"] -->|CSR / ECU identity evidence| Provisioning
  Provisioning -->|keys, certificates, trust anchors| ECU["ECA ECU security services"]
  ECU -->|certificate validation| Diagnostics["Authenticated diagnostics"]
  ECU -->|signature validation| Update["Secure update / flash"]
  ECU -->|MAC / freshness material| Comms["Secure communication"]
  ECU -->|lifecycle evidence| Review["OEM review and residual-risk decision"]

flowchart TB
  Boundary["P1: item boundary and variants"] --> TARA["TARA / asset allocation"]
  Interfaces["P1: interface and signal scope"] --> Comms["SecOC / SDT allocation"]
  Diagnostics["P1: diagnostic role model"] --> DiagSec["Secure diagnostics baseline"]
  Update["P1: update and signing ownership"] --> UpdateSec["Secure update baseline"]
  PKI["P1: PKI, HSM and key hierarchy"] --> Crypto["Crypto and trust baseline"]
  TARA --> Closure["Architecture / security baseline closure"]
  Comms --> Closure
  DiagSec --> Closure
  UpdateSec --> Closure
  Crypto --> Closure

flowchart LR
  OEM["OEM customer / vehicle manufacturer"]
  Supplier["Supplier security engineering"]
  subgraph Vehicle["Vehicle or ECU context"]
    ECU["Electric Clutch Actuator ECU"]
    Network["Vehicle networks and other ECUs"]
  end
  Backend["Backend / cloud / IT systems"]
  Diag["Diagnostic and service tools"]
  Dev["Development / ALM / evidence tools"]
  SecOps["Security operations / monitoring"]
  OEM -->|requirements, approval, residual risk| Supplier
  Supplier -->|software, security concept, evidence| OEM
  ECU <--> |signals, messages, SecOC or SDT data| Network
  Diag -->|UDS, authentication, programming| ECU
  Backend -->|updates, certificates, logs| ECU
  Dev -->|builds, tests, traceability| Supplier
  ECU -->|security events and evidence| SecOps
  SecOps -->|vulnerability and incident feedback| Supplier

flowchart LR
  ECU["Electric Clutch Actuator ECU"]
  OEM["OEM customer"]
  Diag["Diagnostic tool"]
  Net["Vehicle network"]
  Backend["Backend / cloud / IT"]
  PKI["PKI / provisioning"]
  ALM["Development and evidence tools"]
  SecOps["Security operations"]
  OEM <--> |requirements, approval, evidence| ECU
  Diag -->|UDS, Auth 0x29, programming| ECU
  Net <--> |SecOC / SDT messages, counters| ECU
  Backend <--> |software update, logs, config| ECU
  PKI -->|certificates, keys, trust anchors| ECU
  ALM -->|builds, tests, traceability| ECU
  ECU -->|events, vulnerabilities| SecOps

flowchart TB
  subgraph Product["Electric Clutch Actuator ECU boundary"]
    Core["System core"]
    App["Application software"]
    Security["Security services"]
    Platform["Hardware platform"]
    DiagSrv["Diagnostic server"]
    Update["Boot / update / IVD handling"]
    Logging["Logging and audit"]
  end
  External["External interfaces"]
  Backend["Backend and IT systems"]
  Tools["Engineering toolchain"]
  Compliance["Compliance and evidence process"]
  External --> Core
  Core --> App
  App --> Security
  Security --> Platform
  DiagSrv --> Security
  Update --> Security
  Security --> Logging
  Backend --> Update
  Tools --> Compliance
  Compliance --> Security

flowchart LR
  subgraph Product["Electric Clutch Actuator ECU trust boundary"]
    Auth["Authentication and authorization"]
    Crypto["Crypto, key and certificate handling"]
    DiagSec["Secure diagnostics"]
    Comms["Secure communication freshness and replay protection"]
    Boot["Secure boot and platform integrity"]
    Update["Secure update / flash / IVD"]
    Log["Logging and audit"]
  end
  Diag["Diagnostic tool"] -->|authenticated UDS| DiagSec
  Vehicle["Vehicle network"] -->|SecOC or SDT data| Comms
  Backend["Backend / IT"] -->|updates and certificates| Update
  PKI["PKI"] -->|trust anchors and certificates| Crypto
  Boot --> Crypto
  Auth --> DiagSec
  Crypto --> Comms
  Update --> Boot
  Log --> SecOps["Security operations"]
  Evidence["Evidence repository"] --> Customer["OEM customer approval"]
  Log --> Evidence

flowchart TB
  subgraph Product["Inside product boundary"]
    ECU["ECU software and hardware"]
    Sec["Security services"]
  end
  subgraph Vehicle["Vehicle / network boundary"]
    Net["Other ECUs and vehicle buses"]
  end
  subgraph Backend["Backend / cloud boundary"]
    Cloud["Update, PKI, logs, portals"]
  end
  subgraph Diagnostic["Diagnostic access boundary"]
    Tool["Service and engineering tools"]
  end
  subgraph Tooling["Development / tooling boundary"]
    ALM["ALM, CI, test, evidence"]
  end
  subgraph Customer["Customer / OEM boundary"]
    OEM["Approval and residual risk"]
  end
  Unknown["Unknown deployment zones"]
  Tool -->|trusted diagnostic session unknown details| ECU
  Net -->|vehicle data| ECU
  Cloud -->|update, certificates, events| Sec
  ALM -->|evidence and artifacts| OEM
  ECU -->|security evidence| OEM
  Unknown -. clarification needed .-> ECU

flowchart LR
  Req["Customer requirements"] -->|traceability evidence| ALM["ALM / evidence repository"]
  ALM -->|security concept and VnV reports| OEM["OEM customer"]
  Diag["Diagnostic tool"] -->|UDS requests, credentials| ECU["Electric Clutch Actuator ECU"]
  ECU -->|diagnostic responses, logs| Diag
  Net["Vehicle network"] <--> |signals, SDT / SecOC data, counters| ECU
  Backend["Backend / update service"] -->|software package, signature, IVD| ECU
  PKI["PKI"] -->|certificates and trust anchors| ECU
  ECU -->|security events, vulnerabilities| SecOps["Security operations"]
  SecOps -->|incident and mitigation feedback| ALM

flowchart TB
  Assets["Assets: ECU software, data, keys, evidence"]
  Surfaces["Attack surfaces: diagnostics, vehicle network, update, backend, tooling"]
  Goals["Security goals: authenticity, integrity, freshness, confidentiality, availability"]
  Caps["Capabilities: IAM, crypto, secure diagnostics, secure update, logging"]
  Mech["Mechanisms: certificates, keys, SecOC/SDT, secure boot, audit"]
  Evidence["Evidence: traceability, VnV, residual risk, customer approval"]
  Assets --> Surfaces
  Surfaces --> Goals
  Goals --> Caps
  Caps --> Mech
  Mech --> Evidence

flowchart LR
  subgraph Features["Feature domains"]
    CoreF["Core product capabilities"]
    CommF["Communication and connectivity"]
    DiagF["Diagnostics and maintenance"]
    CyberF["Cybersecurity capabilities"]
    OpsF["Operations and evidence"]
  end
  subgraph Components["Architecture elements"]
    Core["System core"]
    App["Application software"]
    Sec["Security services"]
    HW["Hardware platform"]
    Ext["External interfaces"]
    Back["Backend / IT"]
    Tool["Engineering toolchain"]
    Comp["Compliance process"]
  end
  CoreF --> Core
  CoreF --> App
  CommF --> Ext
  CommF --> Sec
  DiagF --> Sec
  DiagF --> App
  CyberF --> Sec
  CyberF --> HW
  OpsF --> Back
  OpsF --> Tool
  OpsF --> Comp

flowchart LR
  Source["Cleaned Markdown requirements"] --> Req["Extracted requirements"]
  Req --> Features["Feature model"]
  Req --> Interfaces["Interface model"]
  Req --> Caps["Security capabilities"]
  Req --> Arch["Architecture views"]
  Features --> Trace["Traceability gate"]
  Interfaces --> Trace
  Caps --> Trace
  Arch --> Trace
  Trace --> Review["Human review and customer clarifications"]