Master’s in RTOS and Hypervisor Engineering in Automotive — Partitioning, Isolation and Mixed Criticality
Online master's programme of 1,900 hours in automotive RTOS and hypervisor engineering, structured in 12 modules covering real-time theory, RTOS on microcontrollers and application processors, automotive hypervisors, spatial and temporal partitioning and isolation, mixed criticality, secure boot and functional safety under ISO 26262, AUTOSAR Classic Platform and IEC 61508, with an assigned technical tutor.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Apply real-time scheduling theory.
Configure RTOS on microcontrollers and application processors.
Deploy hypervisors on automotive platforms.
Ensure spatial and temporal isolation between partitions.
Design mixed-criticality systems.
Apply functional safety requirements to base software.
Develop a complete RTOS and hypervisor project.
Who it's for
- Embedded operating systems engineers working with AUTOSAR OS, QNX or Linux.
- Virtualisation engineers consolidating ECUs with hypervisors.
- Real-time software engineers responsible for timing and scheduling analysis.
- Platform architects defining partitioning and mixed-criticality strategies.
- Software functional safety engineers working on base software.
- BSP integration engineers bringing up automotive boards.
- Engineering or science graduates aiming to enter the automotive sector.
What you'll work with
- ISO 26262 (functional safety of road vehicles)
- AUTOSAR Classic Platform (standard architecture for automotive ECUs)
- IEC 61508 (functional safety of E/E/PE systems)
- ISO/SAE 21434 (road vehicle cybersecurity engineering)
- ISO 17356-3 (OSEK/VDX operating system)
- IEEE 1003.1 (POSIX operating system interface)
- ARINC 653 (partitioning for avionics application software)
- MISRA C:2012 (coding guidelines for safety-critical C)
- QNX Neutrino
- Xen Project
- FreeRTOS
- Zephyr
- Lauterbach TRACE32
12 modules · 1900 h
1.1Requirements of automotive embedded software1.2Real-time operating systems1.3General-purpose operating systems1.4Mixed criticality in vehicles1.5OSEK and AUTOSAR OS1.6QNX, VxWorks and Zephyr1.7Automotive Linux1.8Hypervisors in the vehicle1.9Trends in ECU consolidation1.10Case study: OS map of a vehicle
2.1Periodic and sporadic tasks2.2Fixed-priority scheduling2.3Rate monotonic and deadline monotonic2.4Earliest Deadline First scheduling2.5Response-time analysis2.6Priority inversion2.7Priority inheritance protocols2.8Worst-case execution time (WCET) analysis2.9Partitioned and global multi-core scheduling2.10Lab: RTA of a task set
3.1AUTOSAR OS architecture3.2Tasks and interrupts3.3Resources and alarms3.4Memory protection3.5Timing protection of tasks3.6Multi-core in AUTOSAR OS3.7FreeRTOS and SAFERTOS3.8Zephyr RTOS in automotive3.9RTOS configuration3.10Practical exercise: AUTOSAR OS configuration
4.1QNX Neutrino architecture4.2Microkernel and message passing4.3Adaptive partitioning in QNX4.4Linux with the PREEMPT_RT patch4.5Interrupt latencies4.6RTOS certification4.7Real-time POSIX4.8Drivers and services4.9RTOS comparison4.10Workshop: latency measurement with cyclictest
5.1Type 1 and type 2 hypervisors5.2Hardware-assisted virtualisation5.3Xen and QNX Hypervisor5.4Lightweight hypervisors and separation kernels5.5Static resource partitioning5.6Device virtualisation5.7VirtIO paravirtualised devices5.8Inter-VM communication5.9Virtualisation performance and overhead5.10Lab: Xen on an ARM board
6.1Spatial memory partitioning6.2Temporal resource partitioning6.3MMU and MPU6.4SMMU for peripherals6.5Cache isolation6.6Memory interference6.7Cache colouring and cache partitioning6.8Bandwidth control6.9Isolation assessment6.10Practical exercise: cache colouring in Xen
7.1Mixed-criticality models7.2Freedom from interference7.3Coexistence of ASILs7.4Consolidation architectures7.5Fault management between partitions7.6Boot and start-up order7.7Cross-partition monitoring7.8Standards applicable to mixed criticality7.9Cockpit use cases7.10Case study: cockpit with Android and an RTOS
8.1Secure boot and root of trust8.2Chain of trust8.3Fast system boot8.4Key management8.5TrustZone and TEE8.6Secure update of base software8.7Memory protection8.8Security isolation8.9Hypervisor cybersecurity8.10Workshop: secure boot on ARM
9.1ISO 26262 part 69.2Requirements for certified operating systems9.3Operating system safety manual9.4Software qualification9.5Dependency analysis9.6Execution timing monitoring9.7Internal and external watchdogs9.8Software FMEA9.9Certification evidence9.10Lab: freedom from interference analysis
10.1System tracing10.2Debugging with Lauterbach tools10.3Timing analysis10.4Synchronised multi-core debugging10.5Profiling of tasks and interrupts10.6Event logging10.7Deadlock detection10.8Stress testing10.9Failure analysis10.10Practical exercise: tracing with Tracealyzer
11.1BSP integration11.2Middleware integration11.3Real-time testing11.4Isolation testing11.5HIL testing of the consolidated system11.6Continuous integration of base software11.7Configuration management11.8Integration documentation11.9Long-term maintenance11.10Workshop: RTOS test pipeline
12.1Definition of the system12.2Selection of RTOS and hypervisor12.3Partitioning design12.4System configuration12.5Real-time analysis12.6Safety analysis12.7Integration and stress testing12.8Conclusions and future work12.9Thesis report12.10Master's Thesis: defence before a panel
How you'll learn
Training is 100% online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so the programme can be combined with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is QNX Neutrino, Xen Project, FreeRTOS, Zephyr and Lauterbach TRACE32, in free, academic or evaluation versions. Exercises are based on real procedures for measuring real-time latencies, analysing interference between partitions and HIL testing of consolidated systems. Assessment is continuous by module, plus the final Master's Thesis.
Standards covered: ISO 26262, AUTOSAR Classic Platform, IEC 61508, ISO/SAE 21434, ISO 17356-3 (OSEK/VDX OS), IEEE 1003.1 (POSIX), ARINC 653, MISRA C:2012.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Where this takes you
Requirements
- A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
- An internet connection and a computer capable of running the programme's software.
- English sufficient to read technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.
You work with QNX Neutrino, Xen Project, FreeRTOS, Zephyr and Lauterbach TRACE32, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.
A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.
A university degree in engineering, science or architecture (or equivalent professional experience), a computer able to run the programme's software and English sufficient to read technical standards.
Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.
Related programmes
Master’s in Event, Thermal and Multispectral Camera Engineering
Online master's programme of 1,900 hours in event, thermal and multispectral camera engineering, structured in 12 modules covering unconventional image sensors, event-data processing, infrared thermography, multispectral…
Master’s in Optimal Control and MPC Engineering for Autonomous Vehicles — Constraints, Robustness and Real Time
Online master's programme of 1,900 hours in optimal control and MPC engineering for autonomous vehicles, structured in 12 modules covering optimal control, vehicle models for MPC,…
Master’s in Autonomous Last-Mile Logistics Engineering
Online master's programme of 1,900 hours in autonomous last-mile logistics engineering: 12 modules covering sidewalk delivery robots, autonomous vans, delivery drones, navigation and perception, logistics optimisation,…
More in Autonomous, ADAS & Software-Defined Vehicle
All Autonomous, ADAS & Software-Defined Vehicle programmes → · How to apply · Fees & financing · Scholarships