GB 44496 is China’s first mandatory standard for automotive software upgrades, enforced alongside GB 44495 and GB 44497.

1.Core Basics

·Scope: M/N-category vehicles and ECU-equipped O-category vehicles with OTA/offline upgrades.

·Enforcement: New models from July 1, 2026; existing models by July 1, 2027.

2.Dual Certification Framework

·SUMS (Software Upgrade Management System): Organizational process audit (prerequisite for vehicle testing).

·VTA (Vehicle Type Approval): Real-vehicle technical compliance testing.

3.Step-by-Step Certification Process

Step 1: Gap Analysis & Preparation (3–6 Weeks)

Assess document systems, process execution, supply chain control, and technical gaps (signature, rollback, HMI).

Step 2: System Document Compilation & Trial Operation

·Software upgrade security policy (signed by top management).

·Organizational structure with clear roles (release approver, impact assessor).

·9 mandatory process procedures (version identification, target vehicle matching, type-approval assessment, etc.).

·Anti-tampering, verification, and emergency response documents.

Step 3: Apply for SUMS Audit

Qualified institutions: CAVC, CQC, CCAP. Submit application, business license, system documents, and upgrade records.

Step 4: SUMS On-Site Audit (2–3 Days)

Verify record integrity, change management, staff competency, and emergency preparedness. Correct non-conformities within 30–45 days.

Step 5: VTA Test Preparation

Confirm vehicle configuration, prepare technical documents, ensure sample functionality, and coordinate HMI/cloud environments.

Step 6: VTA Testing & Rectification (4–8 Weeks)

Test upgrade package security, RxSWIN identification, user notification/consent, power protection, door unlock, interruption rollback, and result notification.

Step 7: CCC Certification Submission

Submit SUMS certificate, VTA report, technical parameters, and consistency plan to obtain CCC certification with GB 44496 compliance.

Total cycle: 5–8 months (smooth); 12+ months (major revisions).

4.Certificate Validity & Post-Certification Obligations

·Certificate validity: ~5 years (per CCC rules).

·Annual surveillance audits: Required to maintain validity.

·Record retention: 10 years post model discontinuation.

·Change management: Re-assessment for major architecture/software changes.

BLUEASIA supports full GB 44496 certification from system setup to CCC submission.Contact: +86 13534225140