Core boundary reminder at the start of the article: GB 44496 only governs M/N/O category complete vehicles. Components such as TBOX, TCU, MCU have no independent national standard certification channel and cannot apply for this separate certification process alone. Component manufacturers only need to align firmware versions, upgrade logic and rollback mechanisms with vehicle OEMs, incorporated into the whole-vehicle SUMS system for unified control and synchronous VTA verification with the vehicle. Independent certification application for TBOX alone creates fully wasted investment.
Step 1: Gap Analysis & Compliance Assessment
·New vehicle platform: 3–6 weeks
·Existing facelift stock vehicle: 1–3 weeks
Not a superficial document review, but full clause-by-clause risk screening against GB 44496 requirements:
1.Document system inspection: Type approval impact evaluation documents, supplier management procedures are the most frequent missing materials
2.Process inspection: Verify written procedures and operation records for all nine mandatory core processes
3.Technical implementation inspection: Upgrade package signature anti-tampering mechanism, rollback verification under extreme failure scenarios, HMI user notification interface
4.Supply chain inspection: Confirm support materials from external ECU and middleware suppliers
A prioritized non-compliance list will be issued after assessment.
Step 2: SUMS System Document Compilation & Trial Operation
·New platform: 4–10 weeks
·Existing modified model: Only supplementary change documents required, 2–4 weeks
SUMS system is the foundation of certification; incomplete documents result in direct rejection of physical testing applications. Three core deliverables must be completed:
1.Software upgrade security management policy, signed and issued by senior management
2.Organizational structure & responsibility allocation table, clearly defining post holders for upgrade package approval, type approval impact assessment and emergency incident handling (no vague "relevant departments")
3.Nine mandatory process procedure documents, each with clear input/output definitions, execution steps and abnormal disposal plans; four security safeguard procedures covering package anti-tampering, full-process security protection, verification & confirmation rules and emergency response contingency plans.
After document drafting, internal trial operation must be conducted with 1–2 complete real upgrade cycles, retaining full process records as audit evidence.
Step 3: Formal SUMS System Audit (Document Review + On-Site Inspection)
Authorized audit bodies include CATARC Huacheng, CQC, CCAP, etc. After application submission, auditors first conduct document review (1–2 weeks) to check full standard clause coverage. Passed document review triggers 2–3 days of on-site audit with a two-person audit team.Key audit focus: Random spot check of complete record chains for historical upgrade activities covering risk assessment to post-upgrade monitoring; missing any link constitutes non-conformity. Formal approval records for hardware/software changes and clear job responsibility awareness of core posts are also verified. Complete emergency drill execution records are mandatory.
Two audit judgment results after on-site inspection:
1.Minor non-conformities: Rectification evidence submitted within 30–45 days for closure
2.Major non-conformities: Full process suspended, requiring a second full on-site audit, delaying progress by at least one month.
A SUMS compliance audit report will be issued upon passing, which is a statutory mandatory document for subsequent CCC and vehicle announcement filing. Third parties can issue a separate SUMS certificate for bidding and customer internal audit display, yet vehicle announcement and CCC bodies only recognize the official audit report, rejecting standalone certificates as incomplete filing materials.
Step 4: VTA Physical Vehicle Test Preparation & Test Slot Reservation
Critical process optimization tip: Laboratory VTA test slots can be reserved in advance without waiting for full completion of SUMS audit. Gap analysis reports, draft system documents and trial operation records are sufficient to lock test benches and carry out pre-test vehicle debugging simultaneously. The full SUMS audit report only needs to be supplemented before CCC submission after VTA test reports are issued. Waiting for full audit completion to reserve test slots wastes 1–2 months of valuable lead time.
Pre-test preparation checklist:
1.Confirm vehicle software version, full ECU list, network topology and upgrade mode (full package / differential package, OBD / USB / OTA)
2.Complete technical specification documents: Vehicle software upgrade architecture diagram, ECU communication interaction relationship, upgrade package structure, encryption & signature verification scheme, failure rollback logic
3.Ensure sample vehicle hardware functions normally with full upgrade execution capability
4.Build matching cloud platform test environment for OTA-equipped vehicles
Supplementary policy reminder: Starting July 1, 2026, new vehicle announcement filing requires simultaneous submission of GB 44495 and GB 44496 compliance materials. Incomplete GB 44495 documents will block subsequent announcement progress when submitting GB 44496 testing.
Step 5: VTA Physical Vehicle Testing Implementation
·New full vehicle platform: 4–8 weeks
·Existing modified model change testing: 2–4 weeks
14 total test items split into two modules:
8 Universal Local Upgrade Test Items (mandatory for all vehicles with any upgrade mode)
·Upgrade package authenticity & integrity anti-tampering verification
·OBD software identification code reading consistency inspection
·User upgrade notification & confirmation mechanism completeness check
·Battery power pre-condition protection test
·Driving state upgrade interlock blocking test (hard zero-failure standard)
6 Exclusive OTA Online Supplementary Test Items (only for vehicles with remote OTA function)
·Multi-channel consistent user notification push verification
·Pre-upgrade prerequisite condition inspection
·In-cabin mechanical door unlock protection during full upgrade
·Network interruption & upgrade failure automatic rollback function
·Post-rollback full vehicle functional self-inspection
·Automatic push of self-inspection results to end users
Test failure disposal rules:
·Minor adjustment (e.g., modify HMI notification text): Only retest the user notification single item
·Major hardware/software change (replace TCU communication module, overhaul OTA rollback logic): Partial supplementary VTA testing required
Retesting fees are charged at 40%–70% of the original single-item test price. Simple software bug fixes only require single-item retesting; architecture defects trigger wide-range supplementary verification.
Step 6: Document Consolidation & CCC Certificate Application
Document review cycle: 3–8 weeks + filing & public notice period: 2–4 weeksGB 44496 compliance records are embedded within the whole-vehicle CCC certificate, with no independent standalone national standard certificate issued.Required filing materials: Original SUMS compliance audit report, original VTA test report, vehicle technical parameter sheet, vehicle user manual software upgrade chapters, production consistency control plan. After document review, the certification body issues a whole-vehicle CCC certificate with GB 44496 compliance recorded.
Important correction: Whole vehicle CCC certificates have no fixed 5-year validity term as consumer electronics CCC rules; certificates remain continuously valid subject to annual surveillance audits. Only major vehicle model changes or mandatory standard revisions trigger change filing and certificate renewal.
Step 7: Post-Certificate Long-Term Annual Compliance Maintenance
Annual factory surveillance audit is bundled whole-vehicle evaluation, focusing on continuous SUMS system operation, standardized execution of actual upgrade activities, consistency between mass-produced vehicle configurations/software versions and certified prototypes. Major non-conformities discovered during surveillance will lead to certificate suspension or revocation.
All upgrade records must be archived for 10 years post vehicle model discontinuation, including firmware version and hardware change ledgers for TBOX, MCU and all electronic control units. Replacement of core component suppliers triggers mandatory change filing and supplementary differential testing, unreported hardware modifications constitute audit non-compliance.
Full Project Cycle Summary
·Smooth new vehicle platform: 5–8 months
·Existing stock vehicle with hardware reconstruction + supplementary system records: 3–5 months
·Weak internal system foundation or frequent test rectification: Over 1 year
Expedited service channels are available for system audit and laboratory test benches, cutting lead time by approximately 30% during peak seasons; CQC and MIIT equipment center document review have no official expedited channels, public notice filing cannot be accelerated by payment.
Special Exemption Reminder
L-class motorcycles, factory-only special off-road vehicles and vehicles supporting only offline USB flashing without OTA remote upgrade are exempt from the full seven-step SUMS + VTA certification workflow. Enterprises with pending projects are advised to lock laboratory test benches immediately as test slot resources will become increasingly tight.
For inquiries about GB 44496-2024 full certification workflow, contact BlueAsia Compliance Consultant: +86 13534225140 (Benson)
相关新闻
