A Letter From GlobalPlatform's Executive Director, Kevin Gillick

Fast track process update

During the meetings in Paris, GlobalPlatform launched a new Fast Track Process to expedite the publication of technology developed by members outside of GlobalPlatform and offer members another means to contribute to the organization. Since this is a new and developing process, with some details still to be fine-tuned, the first proposals presented during the Paris member meetings are being used to evaluate and refine the process. As such, we ask that members delay submissions to the Fast Track Process until this fine-tuning is complete.

We will update you as this develops but please feel free to contact the Secretariat with any questions.

Watch:

Andy Ramsden on bringing trust to mobile payments

Watch Andy Ramsden, Product Marketing Director for Trustonic, explain how TEE technology can help bring trust and security to mobile payments, on GlobalPlatformTV.

New specifications for download

The following specifications are now available for member and public download:

• • TEE Management Framework (TMF) Version 1. This document describes the security model for the administration of Trusted Execution Environments (TEE), trusted applications (TA) and their corresponding security domains. It presents the roles and responsibilities of the different stakeholders involved in the administration of a TEE and TA, the life cycle of administrated entities, the mechanisms involved in administration operations and the protocols used to perform these operations.
  • TMF: Symmetric Cryptography Security Layer Version 1. This document specifies a security mechanism that can be used in the context of the TEE Management Framework for the realization of the security layer.
  • GlobalPlat form Device TEE Initial Configuration Version 1.1. This document specifies configuration requirements for implementing the TEE Initial Configuration version 1.1 of GlobalPlatform’s TEE Specifications.
  • TEE Protection Profile Version 1.2.1. This newly updated document constitutes the reference for the Common Criteria (CC) evaluation of GlobalPlatform Trusted Execution Environment (TEE), which enable mobile security services such as content protection, rights management, corporate policies and payment.

Documents available for review

The following document is currently available for member review:

• GlobalPlatform IoT Task Force secure boot and remote attestation functionalities on GlobalPlatform / Java Card architecture version v0.0.1.19 – This document identifies useful IoT functionalities that are not already supported by GlobalPlatform Secure Elements, and describes how they can be implemented and deployed to a secure chip platform that supports the GlobalPlatform Card specifications and the Java Card Platform. It describes an interoperable way of implementing and deploying the functionalities as a Java Card Applet and deploying them on an embedded secure chip. This could include a description of how the TPM specifications from the Trusted Computing Group can be combined with GlobalPlatform / Java Card technologies to increase the value of the secure chip, especially for M2M and IoT devices.The deadline for members’ comments has been extended to Tuesday, 31 January 2017.

The following document is currently available for public review:

• • GlobalPlatf orm Card Secure Channel Protocol “11” Card Specification v2.3 – Amendment F v1.0.0.6 (toward v1.1). This update of Secure Channel Protocol “11” introduces the management of several CAs as well as the concept of a subordinate key authority (KA) to which a CA may delegate the diversification of keys and certificates. This concept applies to both CA-KLCC and CA-KLOC roles and is optionally supported by a security domain implementing the SCP11 protocol.Please provide your comments to the specification by completing the comment form by Friday, 17 February 2017.

2016 annual report

Between July 2015 and June 2016, GlobalPlatform published 19 technical specifications and documents and presented at 25 industry events. Review all the highlights of GlobalPlatform’s deliverables and successes in the 2016 annual report.

2017 training calendar

In 2017 GlobalPlatform will be delivering training programs on TEE Specifications, Card Specifications, Mobile / ID, the GlobalPlatform Secure Element Mobile Services Kit and Mobile / Identity. A selection of courses will be available in Seoul, Washington DC, Berlin, Shanghai, Munich, and San Francisco. Exact dates and locations will be available soon, along with the opportunity to register for each session.

Did you miss?

Alexander Summerer, Technology Consultant for Mobile Security at Giesecke & Devrient, blogs on enhancing FIDO solutions with TEE technology. Read his thoughts on the future of authentication on the GlobalPlatform website.

Upcoming speaker activity

Gil Bernabeu, GlobalPlatform’s Technical Director, is speaking at IoT Tech Expo (23-24 January, London). Gil is participating in a panel entitled, “Creating a standards framework for IoT” on Tuesday 24 January, 10:20am – 11:00am.

Happy New Year!
With kind regards,
Kevin Gillick