Master'sAutonomous, ADAS & Software-Defined Vehicle Applications open

Master’s in Industrial OTA & SUMS Engineering

Online master's programme of 1,900 hours in industrial OTA and SUMS engineering, structured in 12 modules covering ISO 24089, SUMS under R156, industrial OTA architecture, configuration management, update campaigns, OTA security, factory and workshop programming, validation and global regulation (UN ECE R156, ISO 24089, UN ECE R155), with an assigned technical tutor.

Duration1900 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Apply the requirements of ISO 24089 and R156 at industrial scale.

02

Design OTA architectures for large fleets.

03

Manage software configurations and compatibilities.

04

Plan staged update campaigns.

05

Secure the signing and distribution chain.

06

Integrate updating into the factory and the workshop.

07

Develop an industrial OTA and SUMS project.

Profile

Who it's for

  • OTA engineers scaling update systems to large fleets.
  • SUMS managers responsible for R156 compliance.
  • Configuration management engineers handling software variants.
  • Production software engineers working on end-of-line programming.
  • Update campaign managers planning and running fleet campaigns.
  • Release security engineers in charge of signing and PKI.
  • Engineering or science graduates seeking to enter the automotive sector.
Standards & tools

What you'll work with

  • UN ECE R156 (software updates and update management systems)
  • ISO 24089 (road vehicles – software update engineering)
  • UN ECE R155 (cybersecurity management systems)
  • ISO/SAE 21434 (road vehicle cybersecurity engineering)
  • ISO 13400-2 (diagnostic communication over IP (DoIP))
  • ISO 14229-1 (unified diagnostic services (UDS))
  • GB 44496 (Chinese requirements for vehicle software updates)
  • Regulation (EU) 2018/858 (type approval) (EU framework for vehicle type approval)
  • Uptane
  • Vector vFlash
  • Mender
  • AWS IoT
  • HashiCorp Vault
Syllabus

12 modules · 1900 h

  1. 1.1Software volume in current vehicles
  2. 1.2Factory, workshop and remote updates
  3. 1.3Regulatory update requirements
  4. 1.4Impact on type approval
  5. 1.5Risks of failed updates at scale
  6. 1.6Costs of physical campaigns versus OTA
  7. 1.7Industrial organisation of updates
  8. 1.8Cases of large OTA campaigns
  9. 1.9Lessons from published incidents
  10. 1.10Case study: cost of a software recall
  1. 2.1Structure and scope of ISO 24089
  2. 2.2Organisational level of the standard
  3. 2.3Project and infrastructure level
  4. 2.4Update packages and their content
  5. 2.5Update campaigns
  6. 2.6Pre-deployment verification
  7. 2.7Execution in the vehicle
  8. 2.8Relationship with ISO/SAE 21434
  9. 2.9Evidence for audits
  10. 2.10Lab: mapping processes to ISO 24089
  1. 3.1Requirements of the SUMS management system
  2. 3.2Type-approval impact assessment
  3. 3.3RXSWIN management by type
  4. 3.4Vehicle configuration records
  5. 3.5User information and consent
  6. 3.6Safety conditions during the update
  7. 3.7Technical service audit
  8. 3.8SUMS certificate of compliance
  9. 3.9Maintaining the certificate
  10. 3.10Practical: SUMS audit checklist
  1. 4.1Multi-brand OTA backend
  2. 4.2Software catalogue management
  3. 4.3Configuration compatibility engine
  4. 4.4Delta package generation
  5. 4.5CDN distribution
  6. 4.6In-vehicle OTA client
  7. 4.7Update master in the gateway
  8. 4.8Updating legacy ECUs
  9. 4.9Scalability to millions of vehicles
  10. 4.10Workshop: OTA reference architecture
  1. 5.1Vehicle configuration by VIN
  2. 5.2Software bill of materials
  3. 5.3Dependencies between ECU versions
  4. 5.4Compatibility matrices
  5. 5.5Variant management by market
  6. 5.6End-of-line configurations
  7. 5.7Synchronisation with PLM systems
  8. 5.8Configuration data quality
  9. 5.9Detection of inconsistent configurations
  10. 5.10Lab: compatibility engine in Python
  1. 6.1Campaign planning
  2. 6.2Fleet segmentation
  3. 6.3Staged deployment in waves
  4. 6.4Go and stop criteria
  5. 6.5Management of non-updated vehicles
  6. 6.6Communication with dealerships
  7. 6.7Campaign success metrics
  8. 6.8Complaint management
  9. 6.9Coordination with quality and legal
  10. 6.10Practical: staged campaign plan
  1. 7.1Code signing and PKI infrastructure
  2. 7.2Key management in HSMs
  3. 7.3The Uptane framework and roles
  4. 7.4Separation of duties in signing
  5. 7.5Protecting the build chain
  6. 7.6Artefact provenance
  7. 7.7Attacks on OTA infrastructure
  8. 7.8Penetration testing of the backend
  9. 7.9Response to key compromise
  10. 7.10Workshop: release signing ceremony
  1. 8.1End-of-line ECU programming
  2. 8.2Parallel flashing in production
  3. 8.3Programming cycle times
  4. 8.4Workshop tools for updating
  5. 8.5Updating via DoIP
  6. 8.6Software management at dealerships
  7. 8.7Traceability of installed software
  8. 8.8Integration with MES
  9. 8.9Recovery of bricked ECUs
  10. 8.10Lab: DoIP flashing on a bench
  1. 9.1Update testing in the laboratory
  2. 9.2Power interruption tests
  3. 9.3Rollback tests
  4. 9.4Testing on internal fleets
  5. 9.5Multi-ECU compatibility tests
  6. 9.6Network performance validation
  7. 9.7Testing under poor coverage conditions
  8. 9.8Release criteria
  9. 9.9Validation reports
  10. 9.10Practical: update test matrix
  1. 10.1Real-time campaign monitoring
  2. 10.2Fleet status dashboards
  3. 10.3Detection of installation failures
  4. 10.4Failure cause analysis
  5. 10.5Support for affected vehicles
  6. 10.6Service level agreements
  7. 10.7Data costs per campaign
  8. 10.8Continuous process improvement
  9. 10.9Reports to management
  10. 10.10Case study: analysis of a failed campaign
  1. 11.1China's OTA requirements
  2. 11.2Update regulation in the USA
  3. 11.3Requirements in Japan and Korea
  4. 11.4The Data Act and updates
  5. 11.5Liability for updated products
  6. 11.6Features on demand and regulation
  7. 11.7Right to repair
  8. 11.8Standards for heavy vehicles
  9. 11.9Regulatory trends by market
  10. 11.10Workshop: OTA regulatory matrix by market
  1. 12.1Assessment of the current process
  2. 12.2SUMS design
  3. 12.3OTA reference architecture
  4. 12.4Configuration management
  5. 12.5Security and signing model
  6. 12.6Validation plan
  7. 12.7Campaign operations plan
  8. 12.8Conclusions and roadmap
  9. 12.9Thesis report
  10. 12.10Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within each intake, making it compatible with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Uptane, Vector vFlash, Mender, AWS IoT and HashiCorp Vault, in free, academic or evaluation versions. Testing is studied through real procedures: interruption tests during updates, SUMS audits and ECU flashing on a production bench. Assessment is continuous for each module, plus the final Master's Thesis.

Standards covered: UN ECE R156, ISO 24089, UN ECE R155, ISO/SAE 21434, ISO 13400-2, ISO 14229-1, GB 44496, Regulation (EU) 2018/858 (type approval).

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of UN ECE R156, ISO 24089 and UN ECE R155 applied to real cases, not as a theoretical annex.
Industry software:Uptane, Vector vFlash, Mender, AWS IoT and HashiCorp Vault, in free, academic or evaluation versions.
Master's Thesis with defence:a complete industrial OTA and SUMS project, from SUMS design and reference architecture to configuration management, signing model, validation and campaign operations, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

SUMS audit readiness
Map update processes to ISO 24089 and build a SUMS audit checklist.
Compatibility engine
Develop a configuration compatibility engine in Python.
Signing and security
Run a release signing ceremony with keys managed in an HSM.
Validation and campaign plan
Define the update test matrix and a staged campaign plan.
Master's Thesis
A complete industrial OTA and SUMS project, from SUMS design and reference architecture to configuration management, signing model, validation and campaign operations, defended before a panel.
Career opportunities

Where this takes you

OTA engineerSUMS managerConfiguration management engineerProduction software engineerUpdate campaign managerRelease security engineer
Admissions & scholarships

Requirements

  • A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • An internet connection and a computer capable of running the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with Uptane, Vector vFlash, Mender, AWS IoT and HashiCorp Vault, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the software and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Master’s in Industrial OTA & SUMS EngineeringEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.