GlobalPlatform’s Security Certification program confirms conformance of a secure component to a Common Criteria-recognized protection profile through independent security evaluation. It ensures that secure components meet the required levels of security defined for a particular service, enabling service providers to confidently and effectively manage risk and comply with industry requirements.To assist the market in managing varying security requirements, GlobalPlatform has structured the program under three security levels. Each level denotes the ranked levels of threats and attacks that the security certified secure component will defend against. They are:
This simple framework allows future technologies and solutions to be added under these levels. In addition, device manufacturers can select the most appropriate accredited component for meeting their particular requirements, while allowing service providers to mandate a particular level of security to protect their digital services on devices.
What is a protection profile?
A protection profile specifies:
Learn more about the TEE Security Certification Program
In this Q&A, GlobalPlatform Technical Director Gil Bernabeu explores how the security certification program helps protect, ease and accelerate the deployment of digital devices and services.
For security evaluation laboratories to achieve the GlobalPlatform qualification status to provide security TEE or SE certification, your organization must be a GlobalPlatform full member or participating member in good standing.
Security laboratories can apply to:
The laboratory’s processes will then be analyzed on-site to ensure that it is equipped to thoroughly evaluate secure components in line with their respective GlobalPlatform Protection Profiles.
To certify a product, vendors must confirm conformity with the relevant protection profile via an independent security evaluation under an SE certification process, or a TEE certification process.
The legal and technical forms applicable to each type of qualification are provided below.
|Participation Forms||Product Vendor||Laboratory|
|GlobalPlatform TEE Security Certification Agreement|
|Exhibit B – GlobalPlatform TEE Product Certification Request Form|
|GlobalPlatform SE Security Certification Agreement|
|Exhibit B – GlobalPlatform SE Product Certification Request Form|
|TEE Security Target Template|
|GlobalPlatform Laboratory Accreditation Request Form|
|GlobalPlatform TEE Security Laboratory Relationship Agreement|
|GlobalPlatform SE Security Laboratory Relationship Agreement|
|Trademark License Agreement|
|GlobalPlatform Product Security Certification Fees|
Locate your nearest GlobalPlatform-approved laboratory