The operating states of a module

state of nominal operation:      all subsystems work correctly. all actions of the module are globally optimal. comfort criteria apply.

stand by:      global communication subsystem is disconnected or down. all actions of the module are locally optimal. comfort criteria apply.

safe state:

    

• global communication subsystem and local control system fail to work.
• all actions of the module are safe.
• safety criteria apply.

Transitions of operating states