GlobalPlatform Publishes ISO Framework

17 June 2014 – GlobalPlatform, the association which standardizes the management of applications on secure chip technology has published an ISO Framework, which defines how to implement GlobalPlatform’s Specifications in accordance with the latest version of standards from the International Organization for Standardization (ISO). The innovative framework will be of particular benefit to governments deploying GlobalPlatform compliant secure ID documents.

The document, titled: ‘GlobalPlatform Card Technology Card Specification – ISO Framework’proposes a framework based on the GlobalPlatform Card Specification combining the latest ISO standards – ISO/IEC 7816-13, ISO/IEC 7816-4 and ISO/IEC 24727-2. The guidelines enable card manufacturers, service providers and application developers to conform to ISO standards when deploying implementations based on GlobalPlatform Specifications. The framework is the result of a collaboration with the InterNational Committee for Information Technology Standards (INCITS) and is also fully compatible with its recently published INCITS 504-1 standard.

The framework can also be used to deploy multiple applications onto the same platform. “Increasingly, different vertical markets such as governments and banks are taking steps to deploy their services onto the platform of other service providers for the benefit of end-users,” comments Gil Bernabeu, Technical Director of GlobalPlatform. “Government platforms must be compatible with the latest ISO standards, yet, other service providers are not restricted by the same constraints. Therefore when governments and other markets converge on the same platform they cannot coexist due to the mandatory service requirements specified by ISO.

“GlobalPlatform’s ISO Framework ensures that both the latest ISO requirements and GlobalPlatform Specifications evolve in parallel. Card manufacturers, service providers and application developers are therefore able to use the framework to efficiently and cost effectively update and align applications with the ISO standard, thereby enabling the deployment of multiple applications on one ISO compliant platform.”

The publication of the ISO Framework is the second step GlobalPlatform has taken to align its internationally recognized industry standards with the needs of governments globally. The organization previously published a specific ID Configuration which brings GlobalPlatform Specifications into line with the cryptographic standard increasingly being stipulated by governments. As a next step, and to further support governments, GlobalPlatform is working on the publication of a Privacy Framework which will assist governments during their Privacy Impact Assessment Process. This document will be published later in the year.

GlobalPlatform’s ISO Framework is available to download free of charge from the GlobalPlatform website.

Notes to editors:

About GlobalPlatform
GlobalPlatform is a cross industry, not-for-profit association which identifies, develops and publishes specifications which facilitate the secure and interoperable deployment and management of multiple embedded applications on secure chip technology.  Its proven technical specifications are regarded as the international industry standard for building a trusted end-to-end solution which serves multiple actors and supports several business models.

The freely available specifications provide the foundation for market convergence and innovative new cross-sector partnerships.  The technology has been adopted globally across finance, mobile/telecom, government, healthcare, retail and transit sectors.   GlobalPlatform also supports an open compliance program ecosystem to ensure the long-term interoperability of secure chip technology.

As a member-driven association with cross-market representation from all world continents, GlobalPlatform membership is open to any organization operating within this landscape.  Its 120+ members contribute to technical committees and market-led task forces.  www.globalplatform.org.