Apply now
CourseRegulation, Safety, RAMS & Homologation Applications open

UNECE R156 Course: Secure OTA Updates

Online 300-hour course in UNECE R156: secure OTA updates. 6 modules covering UN Regulation No. 156 (software updates), ISO 24089 (software update engineering) and Uptane (aktualizr). Assigned tutor and open enrolment.

Duration300 h
ModeOnline
Start datesSet by the faculty
AwardSEIUM Institute certificate
Enrol now View syllabus Ask an advisor
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Describe the end-to-end architecture of an OTA system.

02

Apply signing, encryption and key management to updates.

03

Implement the Uptane framework for secure updates.

04

Design robustness, rollback and A/B partition mechanisms.

05

Assess the impact of an update on functional safety.

06

Plan verification tests for OTA updates.

07

Develop a secure OTA solution compliant with UN Regulation No. 156.

Profile

Who it's for

  • OTA update engineer who wants to specialise in UNECE R156: secure OTA updates.
  • Automotive cybersecurity engineer who wants to specialise in UNECE R156: secure OTA updates.
  • Embedded software architect who wants to specialise in UNECE R156: secure OTA updates.
  • OTA validation engineer who wants to specialise in UNECE R156: secure OTA updates.
  • Connected vehicle backend engineer who wants to specialise in UNECE R156: secure OTA updates.
  • Applied cryptography specialist who wants to specialise in UNECE R156: secure OTA updates.
  • Graduates in engineering or science looking to enter the automotive industry.
Standards & tools

What you'll work with

  • UN Regulation No. 156 (software updates)
  • ISO 24089 (software update engineering)
  • Uptane Standard (IEEE-ISTO 6100.1)
  • UN Regulation No. 155 (cybersecurity)
  • NIST FIPS 186-5 (digital signature)
  • ISO 26262 (functional safety)
Syllabus

6 modules · 300 h

  1. 1.1Components: backend, telematics and ECU
  2. 1.2Firmware and application updates
  3. 1.3Full and differential updates
  4. 1.4Central gateway and zonal architectures
  5. 1.5A/B storage and partitions
  6. 1.6Flashing via UDS and DoIP
  7. 1.7Bandwidth and data costs
  8. 1.8Functional requirements of R156
  9. 1.9Threats in Annex 5 of R155
  10. 1.10Practical: reference OTA architecture
  1. 2.1Digital signatures for packages
  2. 2.2Certificate chains and PKI infrastructure
  3. 2.3Hardware Security Modules (HSM)
  4. 2.4Secure boot and root of trust
  5. 2.5Encryption of software images
  6. 2.6Key management at the factory
  7. 2.7Key rotation and revocation
  8. 2.8Post-quantum cryptography: an overview
  9. 2.9Hashes and integrity verification
  10. 2.10Laboratory: signing and verifying an image
  1. 3.1Uptane threat model
  2. 3.2Director and Image repositories
  3. 3.3Metadata and roles
  4. 3.4Primary and secondary ECUs
  5. 3.5Full and partial verification
  6. 3.6Protection against rollback and freeze attacks
  7. 3.7Comparison with TUF
  8. 3.8Reference implementations
  9. 3.9Integration with AUTOSAR
  10. 3.10Practical: simulating a replay attack
  1. 4.1Update interruption
  2. 4.2Recovery and rollback
  3. 4.3Safe vehicle conditions
  4. 4.4ISO 26262 applied to OTA
  5. 4.5Pre-validation on a test fleet
  6. 4.6Staged deployment
  7. 4.7Post-update monitoring
  8. 4.8Anomaly detection
  9. 4.9OTA incident response
  10. 4.10Case study: update failure in a fleet
  1. 5.1Penetration testing of the OTA channel
  2. 5.2Fuzzing of update clients
  3. 5.3HIL bench testing
  4. 5.4Variant compatibility testing
  5. 5.5Evidence for the technical service
  6. 5.6ISO/SAE 21434 and OTA TARA
  7. 5.7Performance and timing tests
  8. 5.8Event logging and auditing
  9. 5.9Test reports
  10. 5.10Laboratory: TARA of the update channel
  1. 6.1Vehicle and ECU definition
  2. 6.2Threat model
  3. 6.3Architecture design
  4. 6.4Cryptographic scheme
  5. 6.5Recovery mechanisms
  6. 6.6Verification plan
  7. 6.7Evidence for R156
  8. 6.8Deployment plan
  9. 6.9Report and presentation
  10. 6.10Final review with the tutor
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetables: students progress at their own pace within the enrolment period, making it possible to combine the course with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Uptane (aktualizr), OpenSSL, Mender, Vector CANoe, Wireshark, in free, academic or evaluation versions. Tests are studied using real update test procedures covering power-failure interruption, rollback tests and signature verification. Assessment is continuous by module, plus the final integrative project.

Accreditable laboratories(EN ISO/IEC 17025) with rotor test rig, EMC/Lightning pre-compliance, HIL/SIL, vibration/acoustics.
Evidence-driven Master's Thesis:safety case, test plan, compliance dossier and operational limits.
Industry mentoring:lecturers with track records in the training, , eVTOL/UAM and flight test.
Flexible format(hybrid/online), international cohorts and support from SEIUM Career Services.
Ethics and safety:safety-by-design approach, ciber-OT, DIH and compliance as core pillars.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Vehicle and ECU definition

Describe the end-to-end architecture of an OTA system.

Threat model

Apply signing, encryption and key management to updates.

Architecture design

Implement the Uptane framework for secure updates.

Cryptographic scheme

Design robustness, rollback and A/B partition mechanisms.

Recovery mechanisms

Assess the impact of an update on functional safety.

Career opportunities

Where this takes you

OTA Update EngineerAutomotive Cybersecurity EngineerEmbedded Software ArchitectOTA Validation EngineerConnected Vehicle Backend EngineerApplied Cryptography Specialist
Admissions & scholarships

Requirements

  • No prior degree is required.
  • Internet connection and a computer capable of running the programme's software.
  • Sufficient command of Spanish to follow technical standards documentation.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

Apply now Scholarships
FAQ

Frequently asked questions

The programme consists of 300 hours in total, spread over 3 to 5 months. That is between 10 and 15 hours per week on average, compatible with a full-time job.

You will work with Uptane (aktualizr), OpenSSL, Mender, Vector CANoe and Wireshark. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.

An own diploma from SEIUM upon passing the continuous assessment and the integrative project. It is in-house training, not an official Ministry of Education qualification.

Yes. Modules passed in a course or postgraduate diploma in the same area can be credited towards the advanced programme. Please check the credit transfer policy when you enrol.

Keep exploring

Related programmes

See all in Regulation, Safety, RAMS & Homologation
Course610 $

UK-CA Post-Brexit Homologation Course

Online course of 300 hours in post-Brexit UK type approval and UKCA marking. 6 modules covering the post-Brexit regulatory context, GB type-approval schemes, UKCA marking for…

300 hOnlineRegulation, Safety, RAMS & Homologation
Course500 $

IMDG Course for Maritime Transport of Chemicals

Online 300 h IMDG course for maritime transport of chemicals. 6 modules covering the IMDG Code, SOLAS Convention, Chapter VII and Hazcheck. Assigned tutor and open…

300 hOnlineRegulation, Safety, RAMS & Homologation
Course830 $

Hazard Analysis (HARA) and ASIL Levels Course

Online 300-hour course in Hazard Analysis (HARA) and ASIL levels. 6 modules covering ISO 26262-3 (concept phase and HARA), ISO 26262-9 (ASIL-oriented analyses) and medini analyze.…

300 hOnlineRegulation, Safety, RAMS & Homologation
UNECE R156 Course: Secure OTA UpdatesEnrol
Related programmes

More in Regulation, Safety, RAMS & Homologation

ISO 15005/15007 Course Applied to Driving InterfacesView programme →Railway RAMS CourseView programme →Course in CoP (Conformity of Production) Processes in the EUView programme →Safety Case Integration in Autonomous Systems CourseView programme →Course in Greenwashing and Ethics in Sustainability RegulationsView programme →CSMS (Cybersecurity Management System) Audit CourseView programme →

All Regulation, Safety, RAMS & Homologation programmes → · How to apply · Fees & financing · Scholarships

Scroll to Top
SEIUM – Institute of Advanced Engineering
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.