Postgraduate Diploma in OTA and SUMS: Delta, Rollback and PKI
Online 800-hour Postgraduate Diploma in OTA and SUMS: Delta, Rollback and PKI. 8 modules covering UNECE R156, ISO 24089:2023 and Eclipse hawkBit. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Design end-to-end OTA architectures.
Implement an update management system compliant with UNECE R156.
Apply efficient and verifiable delta updates.
Design robust rollback mechanisms.
Manage a PKI for software signing.
Integrate the Uptane framework into update platforms.
Plan and operate large-scale OTA campaigns.
Who it's for
- OTA update engineer looking to specialise in OTA and SUMS: Delta, Rollback and PKI.
- SUMS manager looking to specialise in OTA and SUMS: Delta, Rollback and PKI.
- Automotive PKI engineer looking to specialise in OTA and SUMS: Delta, Rollback and PKI.
- Embedded software architect looking to specialise in OTA and SUMS: Delta, Rollback and PKI.
- Fleet backend engineer looking to specialise in OTA and SUMS: Delta, Rollback and PKI.
- Update campaign manager looking to specialise in OTA and SUMS: Delta, Rollback and PKI.
- Graduates in engineering or sciences looking to join car manufacturers.
What you'll work with
- UNECE R156
- ISO 24089:2023
- UNECE R155
- ISO/SAE 21434:2021
- Uptane Standard 2.0
- IETF RFC 5280
- IETF RFC 9019
- FIPS 186-5
8 modules · 800 h
1.1SOTA and FOTA updates1.2End-to-end architecture: backend, telematics and ECU1.3Vehicle update manager1.4A/B partitions and background update1.5Safety conditions for installation1.6User consent and information1.7Bandwidth, costs and planning1.8Lessons from real OTA campaigns1.9Comparison of market platforms1.10Case study: OTA architecture for a vehicle with central computing
2.1UNECE R156 requirements2.2ISO 24089 update management process2.3RXSWIN identification and its maintenance2.4Assessment of impact on type approval2.5Update registration and documentation2.6Relationship with the UNECE R155 CSMS2.7SUMS audit and certificate2.8Manufacturer and supplier responsibilities2.9Dealership and remote updates2.10Workshop: SUMS procedure for an ADAS update
3.1Binary diff algorithms: bsdiff and Courgette3.2Differences at file system level3.3Compression and package size3.4In-place application and flash memory use3.5Microcontroller constraints3.6Verification of result integrity3.7Delta generation across multiple versions3.8Performance and installation time3.9Open tools: RAUC, SWUpdate and Mender3.10Laboratory: generating and applying a delta with bsdiff
4.1Rollback strategies with A/B partitions4.2Trial boot and confirmation4.3Restore points and data compatibility4.4ECU dependencies and atomic updates4.5Power failures during installation4.6Protection against rollback to older versions4.7Workshop recovery4.8Update robustness testing4.9Telemetry of installation results4.10Practice: power-cut test bench for A/B update
5.1Public-key cryptography fundamentals5.2X.509 certificates and trust hierarchies5.3Package signing and verification in the vehicle5.4Certificate lifecycle management5.5Key storage in HSM modules5.6Key rotation and revocation5.7Manufacturer signing infrastructure5.8Recommended algorithms and post-quantum transition5.9PKI governance and audit5.10Workshop: certificate hierarchy for software signing
6.1Uptane design principles6.2Image repository and director repository6.3Signed metadata and roles6.4Full and partial verification in ECUs6.5Resilience to key compromise6.6Integration with ISO/SAE 214346.7IETF SUIT architecture6.8Client conformance testing6.9Deployment at ECU suppliers6.10Case study: integrating Uptane into an existing platform
7.1Campaign planning and segmentation7.2Progressive rollout and pause criteria7.3Monitoring success rates7.4Managing offline vehicles7.5Customer communication7.6Safety campaigns and recalls7.7Campaign effectiveness indicators7.8Fleet management platforms7.9Coordination with after-sales7.10Practice: OTA campaign plan for one million vehicles
8.1Definition of the target architecture8.2SUMS procedure8.3Delta update strategy8.4Rollback design8.5PKI design8.6Uptane metadata integration8.7Campaign plan8.8Compliance assessment8.9Report and presentation8.10Final review with the tutor
How you'll learn
Training is 100 % online on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is Eclipse hawkBit, Mender, RAUC, SWUpdate, OpenSSL, in free, academic or evaluation versions. Testing is studied using real update test procedures with power cuts, validation of certificate chains on the bench, and progressive rollouts on pilot fleets. Assessment is continuous by module plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Design end-to-end OTA architectures.
Implement an update management system compliant with UNECE R156.
Apply efficient and verifiable delta updates.
Design robust rollback mechanisms.
Manage a PKI for software signing.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. No university degree is required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical standards reading.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme is 800 hours in total, spread over 6 to 8 months. That is between 10 and 15 hours per week on average, compatible with a full-time job.
You will work with Eclipse hawkBit, Mender, RAUC, SWUpdate, OpenSSL. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
An own diploma from SEIUM on passing the continuous assessment and the integrating project. It is in-house training, not an official Ministry qualification.
Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Check the credit transfer policy when you enrol.
Related programmes
Diploma in Regulatory Strategy and International Homologation for AD
Online postgraduate diploma of 800 hours in regulatory strategy and international type approval for automated driving (AD). 8 modules covering the WP.29 framework, UN R157, R155…
Postgraduate Diploma in Perception in Unstructured Environments
Online 800 h Postgraduate Diploma in Perception in Unstructured Environments. 8 modules covering ISO 17757:2019, ISO 18497 and ROS 2. Assigned tutor and open enrolment.
Postgraduate Diploma in ROS 2 for Automotive: QoS, Security and Discovery
Online 800-hour Postgraduate Diploma in ROS 2 for Automotive: QoS, Security and Discovery. 8 modules with OMG DDS 1.4, OMG DDS Security 1.1 and ROS 2.…
More in Autonomous, ADAS & Software-Defined Vehicle
All Autonomous, ADAS & Software-Defined Vehicle programmes → · How to apply · Fees & financing · Scholarships