GlobalPlatform Defines New Certification Model for Mobile Secure Elements

GlobalPlatform, the international organization which standardizes the management of applications on secure chip technology, has developed its Composition Model v1.0 for the benefit of application and product issuers, such as mobile network operators (MNOs) and financial institutions. The model establishes – for the first time – a streamlined methodology for addressing security requirements from different markets and re-using certification results of applications and secure elements that have previously been achieved. The resulting methodology, therefore, enables the telecom and payment industries to more easily test and redeploy mobile platforms and secure applications once they have been certified. This first version of the model identifies the common certification process applicable to both EMVCo security evaluation and Common Criteria – the international standard for evaluating the security of products and systems. The model defines how to manage the security certification of any certified secure application – such as payment – and any certified secure element platform – for example a UICC. This optimizes the testing requirements of these certification bodies when a new secure application or a new platform is combined with a previously certified platform or application. Additionally, a specific methodology is proposed for loading applications with less stringent security requirements onto certified platforms without impacting the platforms’ certification. The GlobalPlatform Composition Model v1.0 has been supported by the Association of French Mobile Operators (AFOM), the European Payments Council, the European Telecommunications Standard Institute (ETSI) and SIMAlliance. The document has also received a contribution from the International Security Certification Initiative. The GlobalPlatform Composition Model v1.0 aligns with applications based on Java Card™ and deployed using the GlobalPlatform UICC Configuration – the implementation guide for GlobalPlatform Card Specification v2.2 within the mobile services sector. The GlobalPlatform Composition Model v1.0 does not replace other methods of certification; it is a model for performing certifications that can be adopted at the discretion of the issuer. To download the document visit www.globalplatform.org  

Neueste Artikel

Ein neuer Digitaler Ausweis-Service ermöglicht die vollautomatisierte Identifikation und Legitimierung von Sparkassen-Kunden innerhalb kürzester Zeit. Entwickelt wurde der Service von der S-Markt & Mehrwert. Die Pilotierung und Einführung wird…

Der Vorsitzende des IT-Planungsrates und der Hauptgeschäftsführer des Bankenverbandes sowie die Geschäftsführer von Bank-Verlag und Governikus vereinbaren intensiven Informationsaustausch der beiden Branchen.

Nach der Hauptversammlung vom 29. April 2019 berief der Aufsichtsrat auf seiner Sitzung am 9. Mai Massimo Sarmi zum Vizepräsidenten des Aufsichtsrats. Zugleich wurde Nicola Cordone als Vorstandsvorsitzender (CEO) des…