New Standard Enables MNO Services to Easily Access Sensitive Functions from Operating Systems
GlobalPlatform Specification removes expensive device customization to access sensitive APIs
29 January 2018 – GlobalPlatform, the standard for secure digital services and devices, has defined a specification that enables mobile network operators (MNOs) to access certain aspects of the mobile device operating system (OS), which is by default not accessible for security reasons. The specification has received input and support from MNO industry body GSMA and device manufacturers, who recognize that MNOs need this advanced access to ensure customers are receiving optimum network management connectivity.
“MNOs want access to mobile device parameters to ensure customers are receiving the best possible service,” explains Gil Bernabeu, GlobalPlatform’s Technical Director. “These low- level services are used to adapt device parameters to the MNO network capabilities. At present, it is expensive and timely to customize each device OS to enable individual MNOs to access sensitive APIs.”
The GlobalPlatform Device Technology Device API Access Control v1.0 defines a generic mechanism that enables MNOs to access sensitive APIs in a mobile device OS based on authorization rules pre-stored in a SIM card (Secure Element). Once inserted or active in the mobile device, the MNO applications are authorized to access specific sensitive APIs on the device.
This specification is intended primarily for SIM card manufacturers, handset manufacturers, and MNOs. This version supports device applications running in the rich execution environment, including Android environments.
Gil concludes: “Establishing a device trust architecture that is accessible to authorized parties is critical if the functionality of a mobile device is to achieve its potential. To realize this, collaboration across stakeholders is essential. The publication of this specification is just one example of the work GlobalPlatform is doing to promote collaboration and open ecosystems where digital services and devices can be managed securely, while bringing efficiencies to stakeholders.”
To download the specification without charge, visit the GlobalPlatform Device Specifications webpages.
To learn more about the work of GlobalPlatform, sign up and read the latest GlobalPlatform Newsletters.
-ENDS-
For further media information, please contact Rob Peryer or Erin Lovett at iseepr: rob@iseepr.co.uk / erin@iseepr.co.uk or on +44 (0) 113 350 1922
Keep up to date with the latest news from GlobalPlatform:
- Follow on Twitter: https://bit.ly/wOiHFp
- Join us on LinkedIn: https://linkd.in/xjxsN5
- Subscribe on YouTube: https://bit.ly/2B6egST
- Follow on WeChat: https://bit.ly/2jY2cYQ
Notes to editors:
About GlobalPlatform
GlobalPlatform is a non-profit industry association driven by over 100 member companies. Members share a common goal to develop GlobalPlatform’s specifications, which are today highly regarded as the international standard for enabling digital services and devices to be trusted and securely managed throughout their lifecycle.
GlobalPlatform protects digital services by standardizing and certifying a security hardware/firmware combination, known as a secure component, which acts as an on-device trust anchor. This facilitates collaboration between service providers and device manufacturers, empowering them to ensure the right level of security within all devices to protect against threats.
GlobalPlatform specifications also standardize the secure management of digital services and devices once deployed in the field. Altogether, GlobalPlatform enables convenient and secure digital service delivery to end users, while supporting privacy, regardless of market sector or device type. Devices secured by GlobalPlatform include connected cars, set top boxes, smart cards, smartphones, tablets, wearables, and other Internet-of-Things (IoT) devices.
The technology’s widespread global adoption delivers cost and time-to-market efficiencies to all. Market sectors adopting GlobalPlatform technology include automotive, healthcare, government and enterprise ID, payments, premium content, smart cities, smart home, telecoms, transportation, and utilities.
GlobalPlatform’s legacy of successful technical specification development is thanks to two decades of energetic and effective industry collaboration. Members influence the organization’s output through participation in technical committees, working groups and strategic task forces. GlobalPlatform technology is developed in collaboration with numerous standards bodies and regional organizations across the world, to ensure continual relevance and timeliness. For more information visit www.globalplatform.org.
