GlobalPlatform and the Global Certification Forum (GCF) independent certification scheme for mobile phones and wireless devices have inked partnership agreements. Allowing the companies to collaborate on the optimization of testing and certification procedures, the partnership will support and accelerate the deployment of secure near field communication (NFC) services. The initial focus of the collaboration will be on mobile NFC handset compliance to reflect that GlobalPlatform’s Secure Element Access Control (SEAC) test suite has been referenced by GSMA’s TS.27 NFC Handset Testbook which is based on 3GPP and 3GPP2 standards.
GlobalPlatform announced the launch of a Security Task Force, which will define the association’s security philosophy and tailor GlobalPlatform’s Specification offerings for the security ecosystem. The task force has been created in response to the increasing number of secure and trusted services that are being deployed on devices such as smartphones that contain often under-utilized secure chip technology, but need to be protected. The group’s immediate priorities are to develop white papers to communicate GlobalPlatform’s role in the security ecosystem and to host GlobalPlatform security workshops with industry representatives to explore the management of secure and non-secure applications on a mobile device. In order to achieve its goals, the group will also facilitate discussions regarding security requirements for devices incorporating secure chip technology and actively contribute to industry efforts to streamline security certification. The group is currently made up of 42 GlobalPlatform Member companies.
Beijing Unionpay Card Technology joined GlobalPlatform as a Participating Member. BCTC will make participation in the GlobalPlatform compliance program a priority, in order to work towards becoming a recognized GlobalPlatform testing laboratory. The program – through its approved laboratories, qualified test tools and established testing infrastructure – standardizes the management of applications on secure chip technology and seeks to ensure the advancement and maintenance of an interoperable, sustainable and trusted end-to-end environment for managing applications on secure chip technology. BCTC will have representation in GlobalPlatform’s Card Committee and will also contribute to all aspects of GlobalPlatform’s market specific task forces. The aim of the Card Committee is to define industry and technology-neutral specifications for the secure, interoperable deployment and management of multiple embedded applications on secure chip technology.
GlobalPlatform announced its newest Observer Member, Advanced Card Systems. ACS, a leading supplier of PC-linked smart card readers, has joined GlobalPlatform to contribute to industry efforts towards tighter security, better management and accelerated deployment of secure chip technology. ACS is able to participate in discussions held by the GlobalPlatform Advisory Council and contribute to GlobalPlatform’s task force initiatives. These groups define specific market requirements and assess how GlobalPlatform’s Specifications can be advanced in line with future needs.
GlobalPlatform announced its Board of Directors for fiscal year 2014*, following annual elections for six of the eleven Board seats. Individual members to serve as Board Officers for a one-year term have also been confirmed, as well as the appointment of a new Mobile Task Force Chair. Marc Kekicheff – Senior Business Leader of Chip Innovation at Visa Inc. retains his position as Chairman. Uwe Wittig – Group Vice-President within the Mobile Security Business Unit at Giesecke & Devrient continues as GlobalPlatform Vice-Chairman; and Yves Moulart – Director of Development and Innovation within STMicroelectronics’ Secure MCUs Division, Integrated Secure Solutions, is again confirmed as GlobalPlatform’s Secretary / Treasurer. First-year members to serve a two-year term include Yves Moulart, Simon Moore, Solutions Architect – ARM, Rémi de Fouchier, Vice-President, Marketing Communication – Gemalto, Arnaud du Chéné, Vice President, Head of Product Quality within Global Chip & Contactless Solutions – MasterCard Worldwide and Sebastian Hans, Senior Standardization Manager – Oracle. Additionally, Jon Geater, Chief Technology Officer at Trustonic was elected to serve a one-year term.
GlobalPlatform has published the first Trusted Execution Environment (TEE) Protection Profile (PP)*. The document defines the level of security required in a TEE hosted in a mobile device to support the delivery of a range of value added services including premium content and mobile wallets, as well as enterprises and governments supporting bring your own device (BYOD) initiatives. GlobalPlatform members have published the market’s first PP for TEE products; a secure area that resides in the main processor of a mobile device and ensures that sensitive data is stored, processed and protected in a secure environment. The document identifies the security needs of the TEE to support different market requirements by combining the standard security methodology outlined by Common Criteria, with the best practice specifications as defined by GlobalPlatform in relation to TEE architecture and interfaces**.
Global smart card testing service provider, CETECOM, has joined GlobalPlatform as a Participating Member.CETECOM has identified participation in the GlobalPlatform compliance program as a key priority in order to work towards becoming a recognized GlobalPlatform testing laboratory. As the association which standardizes the management of applications on secure chip technology, GlobalPlatform seeks to ensure the advancement and maintenance of an interoperable, sustainable and trusted end-to-end environment for managing applications on secure chip technology. The association is achieving this through its established testing infrastructure and qualified test tool providers and laboratories.
GlobalPlatform announced Hengbao Corporation as its latest Observer Member. Hengbao smart card products and technology solutions which operates across the banking, telecommunication, identity and internet of things markets – will direct its attention towards GlobalPlatform’s Task Force initiatives. These groups define specific market requirements and assess how GlobalPlatform’s Specifications can be advanced in line with future needs.
GlobalPlatform advanced its Composition Model, which streamlines the security evaluation of NFC contactless mobile applications. A composite product consists of an open platform (such as a secure element [SEs]), with one or more secure applications (known as sensitive applications), and optionally one or more basic applications (which does not need to comply with stringent security requirements to operate). As SEs in mobile devices begin to host multiple applications, it is important that all applications perform as intended and do not interfere with the other services being delivered. Evaluating the security of applications pre and post issuance is therefore vital, but needs to be cost and time effective for all market stakeholders.
GlobalPlatform announced its Board of Directors for fiscal year 2013, following annual elections for six of the eleven Board seats. Marc Kekicheff – Senior Business Leader of Chip Innovation at Visa Inc. retains his position as Chairman for the third consecutive year. GlobalPlatform Vice-Chairman, Uwe Wittig – Group Vice President, Head of Business Line Payment, Transit and Authentication at Giesecke & Devrient, and GlobalPlatform’s Secretary / Treasurer, Yves Moulart – Director of Development and Innovation within STMicroelectronics’ Secure MCUs Division, Secure Software Solutions have also been re-appointed to their respective roles at GlobalPlatform. Elected to serve a two year term were Janne Uusilehto – Director / Head of Product Security – Nokia; Eikazu Niwano – Producer in the R&D Planning Department – NTT Corporation; Andreas Muehlberger – Senior Director Engineering – NXP Semiconductors Business Unit Identification; and Jeppe Dorff – Head of Transaction Services – Rogers Communication.
GlobalPlatform has reached 100 members and has produced widely adopted specifications for secure-chips, devices and back-end systems. The infrastructure delivers a trusted end-to-end solution, which facilitates the secure and interoperable deployment and management of multiple embedded applications on secure chip technology. The need to deploy services using an agreed infrastructure has become particularly important as markets converge to deliver innovative chip-based services to consumers through mobile devices.
FimeFime mobile devices and chip-based applications, has extended its GlobalPlatform test services to verify that a UICC product meets the functional requirements outlined in GlobalPlatform’s Contactless Services Specification. UICC products that achieve this certification will guarantee that a mobile contactless application performs in a consistent and industry agreed manner, regardless of the mobile handset which hosts them. FIME has been approved by GlobalPlatform to provide test tool and laboratory services which confirm that a UICC product meets the functional requirements outlined in GlobalPlatform Card Specification v2.2 Amendment C, also known as Contactless Services.