Master’s in Industrial OTA & SUMS Engineering
Online master's programme of 1,900 hours in industrial OTA and SUMS engineering, structured in 12 modules covering ISO 24089, SUMS under R156, industrial OTA architecture, configuration management, update campaigns, OTA security, factory and workshop programming, validation and global regulation (UN ECE R156, ISO 24089, UN ECE R155), with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Apply the requirements of ISO 24089 and R156 at industrial scale.
Design OTA architectures for large fleets.
Manage software configurations and compatibilities.
Plan staged update campaigns.
Secure the signing and distribution chain.
Integrate updating into the factory and the workshop.
Develop an industrial OTA and SUMS project.
Who it's for
- OTA engineers scaling update systems to large fleets.
- SUMS managers responsible for R156 compliance.
- Configuration management engineers handling software variants.
- Production software engineers working on end-of-line programming.
- Update campaign managers planning and running fleet campaigns.
- Release security engineers in charge of signing and PKI.
- Engineering or science graduates seeking to enter the automotive sector.
What you'll work with
- UN ECE R156 (software updates and update management systems)
- ISO 24089 (road vehicles – software update engineering)
- UN ECE R155 (cybersecurity management systems)
- ISO/SAE 21434 (road vehicle cybersecurity engineering)
- ISO 13400-2 (diagnostic communication over IP (DoIP))
- ISO 14229-1 (unified diagnostic services (UDS))
- GB 44496 (Chinese requirements for vehicle software updates)
- Regulation (EU) 2018/858 (type approval) (EU framework for vehicle type approval)
- Uptane
- Vector vFlash
- Mender
- AWS IoT
- HashiCorp Vault
12 modules · 1900 h
1.1Software volume in current vehicles1.2Factory, workshop and remote updates1.3Regulatory update requirements1.4Impact on type approval1.5Risks of failed updates at scale1.6Costs of physical campaigns versus OTA1.7Industrial organisation of updates1.8Cases of large OTA campaigns1.9Lessons from published incidents1.10Case study: cost of a software recall
2.1Structure and scope of ISO 240892.2Organisational level of the standard2.3Project and infrastructure level2.4Update packages and their content2.5Update campaigns2.6Pre-deployment verification2.7Execution in the vehicle2.8Relationship with ISO/SAE 214342.9Evidence for audits2.10Lab: mapping processes to ISO 24089
3.1Requirements of the SUMS management system3.2Type-approval impact assessment3.3RXSWIN management by type3.4Vehicle configuration records3.5User information and consent3.6Safety conditions during the update3.7Technical service audit3.8SUMS certificate of compliance3.9Maintaining the certificate3.10Practical: SUMS audit checklist
4.1Multi-brand OTA backend4.2Software catalogue management4.3Configuration compatibility engine4.4Delta package generation4.5CDN distribution4.6In-vehicle OTA client4.7Update master in the gateway4.8Updating legacy ECUs4.9Scalability to millions of vehicles4.10Workshop: OTA reference architecture
5.1Vehicle configuration by VIN5.2Software bill of materials5.3Dependencies between ECU versions5.4Compatibility matrices5.5Variant management by market5.6End-of-line configurations5.7Synchronisation with PLM systems5.8Configuration data quality5.9Detection of inconsistent configurations5.10Lab: compatibility engine in Python
6.1Campaign planning6.2Fleet segmentation6.3Staged deployment in waves6.4Go and stop criteria6.5Management of non-updated vehicles6.6Communication with dealerships6.7Campaign success metrics6.8Complaint management6.9Coordination with quality and legal6.10Practical: staged campaign plan
7.1Code signing and PKI infrastructure7.2Key management in HSMs7.3The Uptane framework and roles7.4Separation of duties in signing7.5Protecting the build chain7.6Artefact provenance7.7Attacks on OTA infrastructure7.8Penetration testing of the backend7.9Response to key compromise7.10Workshop: release signing ceremony
8.1End-of-line ECU programming8.2Parallel flashing in production8.3Programming cycle times8.4Workshop tools for updating8.5Updating via DoIP8.6Software management at dealerships8.7Traceability of installed software8.8Integration with MES8.9Recovery of bricked ECUs8.10Lab: DoIP flashing on a bench
9.1Update testing in the laboratory9.2Power interruption tests9.3Rollback tests9.4Testing on internal fleets9.5Multi-ECU compatibility tests9.6Network performance validation9.7Testing under poor coverage conditions9.8Release criteria9.9Validation reports9.10Practical: update test matrix
10.1Real-time campaign monitoring10.2Fleet status dashboards10.3Detection of installation failures10.4Failure cause analysis10.5Support for affected vehicles10.6Service level agreements10.7Data costs per campaign10.8Continuous process improvement10.9Reports to management10.10Case study: analysis of a failed campaign
11.1China's OTA requirements11.2Update regulation in the USA11.3Requirements in Japan and Korea11.4The Data Act and updates11.5Liability for updated products11.6Features on demand and regulation11.7Right to repair11.8Standards for heavy vehicles11.9Regulatory trends by market11.10Workshop: OTA regulatory matrix by market
12.1Assessment of the current process12.2SUMS design12.3OTA reference architecture12.4Configuration management12.5Security and signing model12.6Validation plan12.7Campaign operations plan12.8Conclusions and roadmap12.9Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, making it compatible with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Uptane, Vector vFlash, Mender, AWS IoT and HashiCorp Vault, in free, academic or evaluation versions. Testing is studied through real procedures: interruption tests during updates, SUMS audits and ECU flashing on a production bench. Assessment is continuous for each module, plus the final Master's Thesis.
Standards covered: UN ECE R156, ISO 24089, UN ECE R155, ISO/SAE 21434, ISO 13400-2, ISO 14229-1, GB 44496, Regulation (EU) 2018/858 (type approval).
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- An internet connection and a computer capable of running the programme software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with Uptane, Vector vFlash, Mender, AWS IoT and HashiCorp Vault, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in DMS/OMS and Driver Attention Engineering
Online master's programme of 1,900 hours in DMS/OMS and driver attention engineering: 12 modules covering in-cabin sensors, face and gaze analysis, drowsiness and distraction detection, occupant…
Master’s in MapOps Engineering: HD Map Production and Maintenance
Online master's programme of 1,900 hours in MapOps engineering for HD map production and maintenance, structured in 12 modules covering data capture, processing, map feature extraction,…
Master’s in Advanced SOTIF Engineering
Online master's programme of 1,900 hours in advanced SOTIF engineering, structured in 12 modules covering the ISO 21448 lifecycle, specification and ODD, hazard identification, triggering conditions,…
More in Autonomous, ADAS & Software-Defined Vehicle
All Autonomous, ADAS & Software-Defined Vehicle programmes → · How to apply · Fees & financing · Scholarships