For inquiries about GlobalPlatform or website assistance, contact secretariat@globalplatform.org.

安全任務小組

安全任務小組由來自 STMicroelectronics 的 Olivier Van Nieuwenhuyze 擔任主席。 所有 GlobalPlatform 成員均有資格參加此小組,獲批准的非成員政府機構同樣有此資格。

安全任務小組定義了協會的安全理念及其對安全領域的貢獻

目標

安全任務小組致力於:

  • 參與外部安全性組織並進行協作,以確保將廣泛的用例和市場部門的安全要求納入 GlobalPlatform。
  • 向 GlobalPlatform 技術委員會提供安全理念、密碼學、認證和適用性方面的建議。
  • 推進與政府機構及其安全專家的合作,以確定市場需求。

目前優先事項

  • 繼續確定和分類面向物聯網 (IoT) 的安全技術。
  • 為物聯網中的 SCP 開發用例。
  • 遠端連線有限制時,確定物聯網密碼學約束。
  • 推進加密靈活性和後量子密碼學方面的工作。
  • 維護和更新加密演算法建議表。
  • 定義如何結合使用 GlobalPlatform 技術和 TPM 技術(或其他等效庫)。
  • 完成安全級別定義和更新的認證計畫。
  • 支援 TEE 委員會制定 MCU 保護框架。
  • 透過建立由如下方面組成的評估方法論,支援認證機構和實驗室將物聯網平台安全評估標準 (SESIP) 方法與其現有計畫相結合,並確保評估的一致性:
    • 面向廠商的範本
    • 虛擬 SFR 資料庫
    • 指向攻擊活動方法的連結。
相關內容

RoT 要求

透過定義和要求檔案,原始裝置製造商 (OEM) 和服務提供者 (SP) 能夠建立、實作和使用信任根 (RoT) 來保護其裝置和服務。

下載

GlobalPlatform RoT 簡介(英語)

GlobalPlatform 的 RoT 定義和要求視訊簡介解釋了 RoT 的定義以及 GlobalPlatform 建立技術文件的原因。

觀看英文版

使用信任鏈部署和保護數位服務

該商業出版物由 GlobalPlatform 的安全任務小組編撰,其中解釋了以安全為核心設計裝置和服務的重要性。

下載
Crypto Sub-Task Force

GlobalPlatform promotes cross industry discussion to identify and address market requirements

Crypto Sub-Task Force

GlobalPlatform promotes cross industry discussion to identify and address market requirements

Mission

The Security Task Force defines GlobalPlatform’s security philosophy and its contribution to the security landscape.

It works closely with the Crypto Sub-Task Force to monitor new trends in cryptography and examine new algorithm proposals, providing a list of algorithms and protocols based on academic publications and known organizations. This is in addition to supporting the SESIP Committee on its mission to drive the adoption and recognition of the Security Evaluation Standard for IoT Platforms (SESIP) methodology as a worldwide, multi-vertical scheme for IoT security evaluation.

Objectives

  • Engage and collaborate with external security organizations to ensure that security requirements from a broad range of use cases and market sector are brought into GlobalPlatform.
  • Advise the GlobalPlatform technical committees in security philosophies, cryptography, certification and applicability.
  • Facilitate collaboration with government agencies and their security experts to define market requirements.
  • Identify and classify secure technologies for the Internet of things (IoT).
  • Maintain and update GlobalPlatform’s cryptographic algorithm recommendations table, through the crypto sub-task force.

Current Priorities

  • Engage ENISA on the alignment of security levels and cybersecurity certification frameworks.
  • Define how to combine GlobalPlatform technology and TPM technology (or other equivalent library).
Software Bill of Materials (SBOM) Sub-Task Force

Software Bill of Materials (SBOM) Sub-Task Force

The SBOM Task Force is chaired by Gonda Lamberink of Fortress Information Security. All GlobalPlatform members are eligible to participate in this group.

Mission

The purpose of the SBOM (Software Bill of Materials) Task Force is to analyze the impact of, and provide guidance on, the deployment of SBOM.

Objectives

  • To assess the impact of the deployment of SBOM.
  • To clarify the concepts of software transparency and assurance and provide guidance, such as:
    • A consistent means to produce, consume and exchange software transparency and assurance information.
    • A guide to improve interoperability of software transparency and assurance data exchange.
  • To initiate dialogue and collaborations with impacted markets such as telecoms, healthcare and automotive.
  • To collaborate within GlobalPlatform and with external organizations on SBOM and other key iniatives.
  • To define any necessary requirements for technology development in relation to SBOM.

Current Priorities

  • Analyze impact of the SBOM and provide guidance relating to its deployment, including a consistent means to produce, consume and exchange, software transparency and assurance information.
Chairs

GlobalPlatform promotes cross industry discussion to identify and address market requirements

Olivier Van Nieuwenhuyze

GlobalPlatform Vice Chair
Security Task Force Chair

STMicroelectronics

Olivier currently serves as Senior R&D Engineer at STMicroelectronics. Within this role he has software architecture responsibilities for the NFC ecosystem and secure elements.

He joined STMicroelectronics in 2003 and since 1999 Olivier has been active in several smart card projects for banking, transport and near field communication.

Olivier joined the GlobalPlatform Board of Directors in 2017 and was appointed as GlobalPlatform Secretary / Treasurer from 2021 – 2022. He now serves as GlobalPlatform’s Vice Chair and Security Task Force Chair.

Béatrice Peirani

Thales

Dr. Beatrice Peirani is a standardization expert at Thales (former Gemalto), where her work focuses on security and cryptography.

After ten years working with AFNOR, CEN, and ETSI in the field of electronic signatures, and serving as an expert for the European Commission supporting the development of the eIDAS Regulation, Dr. Peirani is now using her expertise to support other standardization organizations. Specifically, since 2016, Dr. Peirani has served as the Chair of GlobalPlatform’s Crypto Sub-Task Force, which evaluates and recommends algorithms for industries such as banks, transportation, and governments. Her work with GlobalPlatform includes overseeing and providing expert input to the organization’s Security Task Force in the areas of cryptographic agility and post-quantum cryptography.

As an active member of the FIDO Alliance, she pushed for the definition of a new security certification methodology for mobile security software solution. She is co-chair of the FIDO Alliance’s Security & Privacy Working Group  and co-chair the organization’s Certification Working Group. She serves as a liaison between the FIDO Alliance and GlobalPlatform, including facilitating the adoption of GlobalPlatform TEE Protection Profile, as a companion program for FIDO Alliance’s Security Level L3.

Laurent Sustek

SBOM Sub-Task Force Chair

STMicroelectronics

Laurent is in Security Technical Marketing at ST Microelectronics. He focuses on general purpose microprocessors and more precisely on STM32 MPUs. Those products are designed for secure edge computing applications. STM32 MPUs’ ecosystem is composed of open source software.

Before joining ST in 2023, he held different positions in various companies of the smart card industry. His former experience in standardization was mainly with ETSI.

He is joining Global Platform in the SBOM Sub-Task Force to chair the current work. Software Bill Of Materials is a key component for a secure software supply chain.

Jeremy O'Donoghue

TES Committee Vice Chair

Qualcomm

Jeremy currently serves as Director, Engineering at Qualcomm, working within the Secure Systems Group. He is responsible for architecture and development of software focused around secure platforms and NFC. In previous roles at Qualcomm, he was the lead security architect and software lead for an NFC CLF development, and has worked extensively on telephony aspects of both Android and Windows-based mobile systems. Jeremy was also an early participant in developing the GSMA NFC Handset Requirements and Testbook.

Jeremy joined the GlobalPlatform Board of Directors in 2016, and is Vice Chair of the TES Committee.

有興趣加入安全任務小組?

GlobalPlatform
Hey There!

It seems you are using an outdated browser, unfortunately this means that our website will not render properly for you. Update your browser to view this website correctly.

GOOGLE CHROME
FIREFOX
MICROSOFT EDGE