GlobalPlatform, the international organization which standardizes the management of applications on secure chip technology, has developed its Composition Model v1.0 for the benefit of application and product issuers, such as mobile network operators (MNOs) and financial institutions. The model establishes – for the first time – a streamlined methodology for addressing security requirements from different markets and re-using certification results of applications and secure elements that have previously been achieved. The resulting methodology, therefore, enables the telecom and payment industries to more easily test and redeploy mobile platforms and secure applications once they have been certified. This first version of the model identifies the common certification process applicable to both EMVCo security evaluation and Common Criteria – the international standard for evaluating the security of products and systems. The model defines how to manage the security certification of any certified secure application – such as payment – and any certified secure element platform – for example a UICC. This optimizes the testing requirements of these certification bodies when a new secure application or a new platform is combined with a previously certified platform or application. Additionally, a specific methodology is proposed for loading applications with less stringent security requirements onto certified platforms without impacting the platforms’ certification. The GlobalPlatform Composition Model v1.0 has been supported by the Association of French Mobile Operators (AFOM), the European Payments Council, the European Telecommunications Standard Institute (ETSI) and SIMAlliance. The document has also received a contribution from the International Security Certification Initiative. The GlobalPlatform Composition Model v1.0 aligns with applications based on Java Card™ and deployed using the GlobalPlatform UICC Configuration – the implementation guide for GlobalPlatform Card Specification v2.2 within the mobile services sector. The GlobalPlatform Composition Model v1.0 does not replace other methods of certification; it is a model for performing certifications that can be adopted at the discretion of the issuer. To download the document visit www.globalplatform.org
Ein neuer Digitaler Ausweis-Service ermöglicht die vollautomatisierte Identifikation und Legitimierung von Sparkassen-Kunden innerhalb kürzester Zeit. Entwickelt wurde der Service von der S-Markt & Mehrwert. Die Pilotierung und Einführung wird…