Apply now
Master'sElectromobility, Batteries & Hydrogen Applications open

Master’s in Charging Cybersecurity and PKI Engineering — ISO 15118, Secure OCPP, EVSE Hardening

Online master's programme of 1,900 hours in charging cybersecurity and PKI engineering — ISO 15118, secure OCPP and EVSE hardening. 12 modules covering threat modelling, applied cryptography, charging PKI, ISO 15118 and OCPP security, EVSE hardening, backend and cloud security, vehicle-side security, security testing, incident response and compliance, with an assigned technical tutor.

Duration1900 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Identify threats in the charging ecosystem through formal modelling.

02

Apply cryptography and TLS to charging communications.

03

Design PKI infrastructures in accordance with ISO 15118.

04

Configure OCPP with advanced security profiles.

05

Apply hardening techniques to charging equipment.

06

Plan security testing and incident response.

07

Develop a comprehensive charging cybersecurity project.

Profile

Who it's for

  • E-mobility cybersecurity engineers.
  • PKI infrastructure specialists working on Plug and Charge.
  • IoT security analysts.
  • Embedded systems penetration testers.
  • CPO security managers.
  • IEC 62443 compliance auditors.
  • Engineering or science graduates seeking to enter e-mobility.
Standards & tools

What you'll work with

  • ISO 15118-20 (vehicle-to-grid communication interface)
  • IEC 62443-4-2 (security requirements for IACS components)
  • Directive (EU) 2022/2555 (NIS2, network and information security)
  • ISO/SAE 21434 (road vehicle cybersecurity engineering)
  • Regulation (EU) 2024/2847 (Cyber Resilience Act)
  • ISO/IEC 27001 (information security management systems)
  • ETSI EN 303 645 (cybersecurity for consumer IoT)
  • UN ECE R155 (vehicle cybersecurity management system)
  • Wireshark
  • OpenSSL
  • Burp Suite
  • Ghidra
  • Metasploit
Syllabus

12 modules · 1900 h

  1. 1.1Attack surface of the charging ecosystem
  2. 1.2Players: vehicle, EVSE, CSMS and eMSP
  3. 1.3Documented incidents in chargers
  4. 1.4Impact of coordinated attacks on the grid
  5. 1.5Security-by-design principles
  6. 1.6STRIDE threat models
  7. 1.7ISO/SAE 21434 risk assessment
  8. 1.8NIS2 Directive requirements
  9. 1.9Cyber Resilience Act and connected products
  10. 1.10Case study: threat model of a charging station
  1. 2.1Symmetric and asymmetric cryptography
  2. 2.2Elliptic curves and ECDSA
  3. 2.3Hash functions and digital signatures
  4. 2.4TLS 1.2 and 1.3 protocol
  5. 2.5X.509 certificates and their structure
  6. 2.6Key generation and storage
  7. 2.7HSMs and secure elements
  8. 2.8Post-quantum cryptography and migration
  9. 2.9Performance on embedded devices
  10. 2.10Lab: mutual TLS configuration
  1. 3.1ISO 15118 PKI architecture
  2. 3.2V2G, OEM, CPO and MO roots
  3. 3.3Contract certificates and provisioning
  4. 3.4Chain validation and revocation
  5. 3.5OCSP protocols and CRLs
  6. 3.6Root of trust and shared roots
  7. 3.7PKI operators in the European market
  8. 3.8Certificate policies and CPS
  9. 3.9Certificate lifecycle management
  10. 3.10Practical: issuing test certificates
  1. 4.1Messages and sessions in ISO 15118-2
  2. 4.2Security improvements in ISO 15118-20
  3. 4.3Secure Plug and Charge
  4. 4.4Mutual vehicle-charger authentication
  5. 4.5Signing of metering data
  6. 4.6Attacks on PLC and HomePlug
  7. 4.7Interception of communications
  8. 4.8Mandatory TLS 1.3 requirements
  9. 4.9Conformance testing
  10. 4.10Workshop: session analysis with Wireshark
  1. 5.1OCPP 2.0.1 security profiles
  2. 5.2Basic authentication versus certificates
  3. 5.3Certificate management via OCPP
  4. 5.4Signed firmware updates
  5. 5.5Security event logging
  6. 5.6Vulnerabilities in OCPP 1.6
  7. 5.7Security proxies and gateways
  8. 5.8Backend penetration testing
  9. 5.9Secure CSMS configuration
  10. 5.10Lab: OCPP with security profile 3
  1. 6.1Charger hardware architecture
  2. 6.2Secure boot and chain of trust
  3. 6.3Storage encryption
  4. 6.4Management of debug ports
  5. 6.5Charger network segmentation
  6. 6.6Embedded Linux and minimal configuration
  7. 6.7Physical security and anti-tamper
  8. 6.8Protection of user interfaces
  9. 6.9Management of service credentials
  10. 6.10Practical: hardening checklist
  1. 7.1Cloud CSMS architecture
  2. 7.2Identity and access management
  3. 7.3API and OCPI security
  4. 7.4Protection against denial of service
  5. 7.5Logging, monitoring and SIEM
  6. 7.6Container security
  7. 7.7PCI DSS payment data protection
  8. 7.8Back-ups and recovery
  9. 7.9Supply chain security
  10. 7.10Workshop: backend threat modelling
  1. 8.1Control units involved in charging
  2. 8.2Vehicle gateway and segmentation
  3. 8.3Related UNECE R155 requirements
  4. 8.4Protecting the battery against malicious commands
  5. 8.5On-board charger security
  6. 8.6OTA updates of the charging module
  7. 8.7In-vehicle intrusion detection
  8. 8.8Interaction with mobile apps
  9. 8.9Privacy of charging data
  10. 8.10Case study: attack on an on-board charger
  1. 9.1IoT penetration testing methodologies
  2. 9.2Fuzzing of charging protocols
  3. 9.3Firmware analysis
  4. 9.4Hardware evaluation and side channels
  5. 9.5Common Criteria certification
  6. 9.6European certification schemes
  7. 9.7Vulnerability disclosure programmes
  8. 9.8Patch and update management
  9. 9.9Test reports and remediation
  10. 9.10Lab: fuzzing OCPP messages
  1. 10.1Security monitoring of chargers
  2. 10.2Indicators of compromise in charging
  3. 10.3Security operations centre
  4. 10.4Incident response plan
  5. 10.5Notification under NIS2
  6. 10.6Device forensics
  7. 10.7Coordination with sector CSIRTs
  8. 10.8Service recovery and continuity
  9. 10.9Crisis simulation exercises
  10. 10.10Practical: playbook for a firmware incident
  1. 11.1IEC 62443 for industrial systems
  2. 11.2ISO/IEC 27001 at operators
  3. 11.3ETSI EN 303 645 requirements
  4. 11.4NIS2 Directive and charging operators
  5. 11.5Cyber Resilience Regulation
  6. 11.6Data protection and GDPR
  7. 11.7AFIR Regulation and security requirements
  8. 11.8Radio Equipment Directive
  9. 11.9Compliance audits
  10. 11.10Workshop: IEC 62443 gap analysis
  1. 12.1Definition of scope and assets
  2. 12.2Threat and risk analysis
  3. 12.3PKI architecture design
  4. 12.4EVSE hardening specification
  5. 12.5Security of OCPP and ISO 15118 communications
  6. 12.6Security test plan
  7. 12.7Project incident response plan
  8. 12.8Conclusions and roadmap
  9. 12.9Master's Thesis report
  10. 12.10Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: you progress at your own pace within the intake, so it can be combined with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, OpenSSL, Burp Suite, Ghidra and Metasploit, in free, academic or evaluation versions. Testing is studied through real procedures for charger penetration testing, ISO 15118 session analysis and backend configuration audits. Assessment is continuous by module, plus the final Master's Thesis.

Standards covered: ISO 15118-20, IEC 62443-4-2, Directive (EU) 2022/2555 (NIS2), ISO/SAE 21434, Regulation (EU) 2024/2847 (Cyber Resilience Act), ISO/IEC 27001, ETSI EN 303 645, UN ECE R155.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of ISO 15118-20, IEC 62443-4-2 and Directive (EU) 2022/2555 (NIS2) applied to real cases, not as a theoretical annex.
Industry software:Wireshark, OpenSSL, Burp Suite, Ghidra and Metasploit, in free, academic or evaluation versions.
Master's Thesis with defence:A comprehensive charging cybersecurity project, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Scope and threat analysis
Define the scope and assets and carry out the threat and risk analysis.
PKI architecture
Design the ISO 15118 PKI architecture and certificate lifecycle.
EVSE hardening and secure protocols
Specify EVSE hardening and the security of OCPP and ISO 15118 communications.
Testing and incident response
Draw up the security test plan and the incident response plan.
Master's Thesis
A comprehensive charging cybersecurity project, defended before a panel.
Career opportunities

Where this takes you

E-mobility cybersecurity engineerPKI infrastructure specialistIoT security analystEmbedded systems penetration testerCPO security managerIEC 62443 compliance auditor
Admissions & scholarships

Requirements

  • A university degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • An internet connection and a computer able to run the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with Wireshark, OpenSSL, Burp Suite, Ghidra and Metasploit, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A university degree in engineering, science or architecture, or equivalent professional experience, plus a computer able to run the programme software and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Keep exploring

Related programmes

See all in Electromobility, Batteries & Hydrogen
Master's8,850 $

Master’s in Applications and Verticals Engineering

Online master's programme of 1,900 hours in e-mobility applications and verticals engineering. 12 modules covering corporate and logistics fleets, urban public transport, heavy-duty road vehicles, shared…

1900 hOnlineElectromobility, Batteries & Hydrogen
Master's6,610 $

Master’s in H₂ Refuelling Infrastructure Engineering — Compression, Cooling, Dispensing and Compliance

Online master's programme of 1,900 hours in H₂ refuelling infrastructure engineering — compression, cooling, dispensing and compliance. 12 modules covering station architecture, compression, cascade storage, pre-cooling,…

1900 hOnlineElectromobility, Batteries & Hydrogen
Master's11,090 $

Master’s in Battery Swapping Systems Engineering — Pack Design, Operation and Business

Online master's programme of 1,900 hours in battery swapping systems engineering (pack design, operation and business): 12 modules covering battery swapping fundamentals, swappable pack design, electrical…

1900 hOnlineElectromobility, Batteries & Hydrogen
Master’s in Charging Cybersecurity and PKI Engineering — ISO 15118, Secure OCPP, EVSE HardeningEnrol
Related programmes

More in Electromobility, Batteries & Hydrogen

Master’s in Synthetic Fuels and e-Fuels in Mobility Engineering — Synthesis, Compatibility and Comparative LCAView programme →Master’s in Battery Quality and Testing Engineering — IEC/UN 38.3, Abuse Tests, Traceability and PassportView programme →Master’s in Hydrogen Storage and Distribution for Vehicles Engineering — 350/700 bar, LH₂, Safety and StandardsView programme →Master’s in Range Extenders and Micro-Hybrids Engineering — 48 V, Regeneration and Coasting StrategyView programme →Master’s in E-Axles and Transmissions for EVsView programme →Master’s in Regulation, Safety and Business EngineeringView programme →

All Electromobility, Batteries & Hydrogen programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.