GlobalPlatform Delivers New TSM Communication Framework for Mobile NFC Ecosystem
18 April 2011 – GlobalPlatform, the organization that standardizes the management of applications on secure chip technology, has released a standard language which uses web services to facilitate secure and interoperable communication between trusted service managers (TSMs) and the rest of the mobile near field communication (NFC) ecosystem.
Free to download from the GlobalPlatform website, two new specifications released by the organization address the communication needs of TSMs, which are independent and trusted third parties that facilitate the provisioning and secure management of mobile contactless services. These specifications align with, and meet the requirements of key industry associations including the European Payments Council (EPC), GSMA, and use cases from the Association Française pour le ‘Sans Contact’ Mobile (AFSCM).
TSMs must be capable of interacting with all mobile network operators and service providers in an interoperable and secure manner. The combined usage of both documents will assist the mobile NFC service community in building a sustainable, scalable and open messaging framework that leverages available web services tools. This will ensure that all parties deploying and managing mobile NFC applications can transport messages efficiently using web services.
The first release is the Web Services Profile for GlobalPlatform Messaging Specification v1.0, which provides guidance on how OASIS (Organization for the Advancement of Structured Information Standards), and W3C (World Wide Web Consortium) Web Services Standards should be implemented in a GlobalPlatform systems deployment to achieve industry interoperability. The document details how to apply IT infrastructures and industry standard components and tools to ease integration and build web services without the need to design a complete business solution. Publication of this work further aligns GlobalPlatform’s technology with current internet capabilities, and aims to encourage confidence in using this medium to communicate when managing the lifecycle of an NFC application deployed on the secure chip of a mobile device.
The web services profile is complemented by GlobalPlatform’s Specification for Management of Mobile NFC Services v1.0. This technical specification defines how messages can be exchanged between all actors in a NFC deployment in an interoperable, secure and reliable web services format. For example, a TSM request on behalf of a bank to a mobile network operator to deploy a payment application (NFC service), or a mobile network operator to notify all parties involved in the delivery of a NFC service that a mobile device has been lost and services to the handset must be terminated.
Eric Le Saint, Chair of the GlobalPlatform Systems Committee and Senior Director of Security, IP and Research at ActivIdentity, comments: “Defining a common language is vital to ensuring interoperable communication exchanges between the actors of the mobile NFC ecosystem. GlobalPlatform Specifications provide the NFC community with the building blocks to create a trusted end-to-end solution which serves multiple actors and supports several business models.”
“We applaud the members of GlobalPlatform for building their specifications on SAML, WS-Security, and other OASIS standards,” said Laurent Liscia, executive director of OASIS. “The implementation of these widely adopted, foundational standards clearly demonstrates GlobalPlatform’s commitment to interoperability for TSMs.”
Mr. Dag-Inge Flatraaker, the Chair of the EPC Mobile Working Group, comments: “We welcome the documents as a first step towards interoperability for TSMs which is a crucial factor for the market take up of these services in the NFC ecosystem. The EPC appreciates that the document Specification for Management of Mobile NFC Services v1.0 covers the processes defined in the TSM /MNO space as specified in the joint EPC-GSMA document and is looking forward to further GlobalPlatform work in the TSM /service provider domain.”
The documents recently released by GlobalPlatform meet the requirements specified in the joint paper from the European Payments Council and the GSMA, entitled ‘Mobile Contactless Payments Service Management Roles – Requirements and Specifications’.
Notes to editors:
In June 2010, Association Française pour le ‘Sans Contact’ Mobile (AFSCM), which facilitates the technical development of NFC and promotes contactless mobile services, entered into a Contribution Agreement with GlobalPlatform. The partnership resulted in AFSCM contributing its business processes and end-to-end system architecture to GlobalPlatform for integration into its specifications. The aim of the agreement was to enable greater access to AFSCM use case materials and assist the advancement of the NFC ecosystem. Read more.
GlobalPlatform is a cross industry, not-for-profit association which identifies, develops and publishes specifications which facilitate the secure and interoperable deployment and management of multiple embedded applications on secure chip technology. Its proven technical specifications are regarded as the international industry standard for building a trusted end-to-end solution which serves multiple actors and supports several business models.
The freely available specifications provide the foundation for market convergence and innovative new cross-sector partnerships. The technology has been adopted globally across finance, mobile/telecom, government, healthcare, retail and transit sectors. GlobalPlatform also supports an open compliance program ecosystem to ensure the long-term interoperability of secure chip technology. www.globalplatform.org