Postgraduate Diploma in FC Systems Control and Functional Safety
Online Postgraduate Diploma of 800 h in FC Systems Control and Functional Safety. 8 modules covering ISO 26262, IEC 61508 and MATLAB/Simulink. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Describe the control architecture of a fuel cell system.
Develop control-oriented dynamic models.
Design control strategies for air, hydrogen and temperature.
Apply the ISO 26262 safety lifecycle.
Carry out FMEA, FTA and FMEDA safety analyses.
Define diagnostics and fault reactions.
Prepare the system's safety case.
Who it's for
- Fuel cell control engineer looking to specialise in FC Systems Control and Functional Safety.
- Functional safety engineer looking to specialise in FC Systems Control and Functional Safety.
- Embedded software engineer looking to specialise in FC Systems Control and Functional Safety.
- Diagnostics engineer looking to specialise in FC Systems Control and Functional Safety.
- HIL validation engineer looking to specialise in FC Systems Control and Functional Safety.
- Product safety manager looking to specialise in FC Systems Control and Functional Safety.
- Graduates in engineering or science seeking to enter the hydrogen automotive sector.
What you'll work with
- ISO 26262
- IEC 61508
- UNECE Regulation No. 134
- Regulation (EU) 2021/535
- ISO 23273
- SAE J2578
- IEC 60812
- IEC 61025
8 modules · 800 h
1.1FC system architecture in the vehicle1.2Hybridisation of the stack with the traction battery1.3Boost DC/DC converter for the stack1.4System operating states1.5Dynamic requirements imposed by driving1.6Interfaces with the vehicle controller1.7Durability requirements of the complete system1.8Commercial reference systems1.9Regulatory framework for hydrogen vehicles1.10Workshop: control architecture of an FC system
2.1Stack voltage dynamic model2.2Compressor and air manifold dynamics2.3Humidity modelling in the anode and cathode2.4Lumped thermal model of the system2.5Reduced-order models for control2.6Linearisation and state-space representation2.7Experimental parameter identification2.8Model validation with test bench data2.9Real-time model execution2.10Practical: dynamic model of the air supply
3.1Oxygen excess ratio control3.2Differential pressure control between anode and cathode3.3Coolant thermal control loops3.4Membrane humidity regulation3.5Power sharing between stack and battery3.6PID control with feedforward3.7Model-based predictive control3.8Robust control against parametric uncertainty3.9Prevention of oxygen starvation during transients3.10Laboratory: oxygen excess ratio control with MPC
4.1Product safety lifecycle4.2Definition of the FC system item4.3Hazard analysis and risk assessment (HARA)4.4ASIL allocation4.5Safety goals for the hydrogen system4.6Functional safety concept4.7Technical safety requirements4.8Random hardware failure metrics4.9Safety software development4.10Case study: HARA for a hydrogen leak
5.1Design FMEA of the stack system5.2Fault tree analysis (FTA)5.3Failure modes and diagnostic analysis (FMEDA)5.4Common cause failure analysis5.5HAZOP study of the hydrogen circuit5.6Analysis of dependencies between elements5.7Safety mechanisms and diagnostic coverage5.8Fault tolerance time intervals5.9Definition of the safe state5.10Workshop: fault tree for anode overpressure
6.1Hydrogen leak detection in the vehicle6.2Low-voltage cell diagnostics6.3Valve and actuator diagnostics6.4Graduated reaction strategies6.5Limp-home mode operation6.6Logging of critical system events6.7On-board diagnostics and fault codes6.8Fault injection campaigns6.9Validation of reaction times6.10Case study: strategy for a cell voltage drop
7.1Functional safety verification plan7.2HIL testing of the system controller7.3System tests on the stack test bench7.4Validation on a prototype vehicle7.5Functional safety assessment7.6Audit of the safety process7.7Structure of the safety case7.8Configuration and change management7.9Type approval under R1347.10Practical: structure of a safety case with GSN
8.1Definition of the item and its boundaries8.2Safety goals derived from HARA8.3Proposed control strategy8.4FTA and FMEDA of the system8.5Proposed diagnostic coverage8.6Verification and validation campaign8.7Safety case argumentation8.8Conclusions and residual risks8.9Report and presentation8.10Final review with the tutor
How you'll learn
100 % online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is MATLAB/Simulink, ANSYS medini analyze, dSPACE SCALEXIO, Isograph Reliability Workbench, Simulink Design Verifier, in free, academic or evaluation versions. The exercises draw on real procedures for oxygen excess ratio control design, HARA analysis of hydrogen systems and the preparation of safety cases. Assessment is continuous by module, plus the final integrative project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Describe the control architecture of a fuel cell system.
Develop control-oriented dynamic models.
Design control strategies for air, hydrogen and temperature.
Apply the ISO 26262 safety lifecycle.
Carry out FMEA, FTA and FMEDA safety analyses.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- A sufficient level of Spanish to follow the reading of technical standards.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme consists of 800 hours in total, spread over 6 to 8 months. This is between 10 and 15 hours per week on average, compatible with a full-time job.
The work is carried out with MATLAB/Simulink, ANSYS medini analyze, dSPACE SCALEXIO, Isograph Reliability Workbench, Simulink Design Verifier. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM own diploma upon passing the continuous assessment and the integrative project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the advanced programme. Check the recognition policy when you enrol.
Related programmes
Postgraduate Diploma in Current Collection, Storage and Regeneration in Rail
Online Postgraduate Diploma of 800 h in Current Collection, Storage and Regeneration in Rail. 8 modules covering EN 50163, EN 50367 and OpenPowerNet. Assigned tutor and…
Postgraduate Diploma in Resource Aggregation and Revenue Stacking
Online 800-hour Postgraduate Diploma in Resource Aggregation and Revenue Stacking. 8 modules covering Directive (EU) 2019/944, Regulation (EU) 2017/2195 and Pyomo. Dedicated tutor and open enrolment.
Postgraduate Diploma in e-Boosting, Start-Stop and 48 V Recovery
800-hour online Postgraduate Diploma in e-Boosting, Start-Stop and 48 V Recovery. 8 modules covering VDA 320, LV 148 and MATLAB/Simulink. Dedicated tutor and enrolment open.
More in Electromobility, Batteries & Hydrogen
All Electromobility, Batteries & Hydrogen programmes → · How to apply · Fees & financing · Scholarships