A Letter From GlobalPlatform's Executive Director, Kevin Gillick

Book your 2017 training now!

We had a great response to our recent training in Paris…did you miss out?

If so, GlobalPlatform is offering a variety of training courses around the world throughout this year. See the full schedule for more information and to register.

Upcoming training sessions include:

• Seoul May 22-26 – Join us in Seoul for two days of Card Specifications training, two days of TEE classroom training, and a one day session on Mobile / Contactless. You can sign up for just one topic, or any combination of the three.
• Washington, D.C. – on Monday, June 5, the day prior to the Secure Technology Alliance “Securing Federal Identity’ conference, GlobalPlatform will host a special one day US Federal ID training session. Both events are conveniently co-located in the Hamilton Crowne Plaza Hotel.

We also offer flexible online Card Specifications training, which helps service providers, software developers, device manufacturers and platform providers to understand and use GlobalPlatform Card Specifications. Due to popular demand, we have extended the discount on GlobalPlatform’s online training until the end of May – register before 31 May to pay only $199! Check out our websitefor more information.

Watch:

 Authentication and certification in the Trusted Execution Environment (TEE)

Gil Bernabeu, Technical Director at GlobalPlatform, and Adam Powers, Technical Director at FIDO Alliance, discuss the collaboration between FIDO Alliance’s authentication services and GlobalPlatform’s Trusted Execution Environment (TEE) technology to ensure the security of the authentication process.

New documents available for member review

The below documents are currently available for member review:

• • GlobalPlatfor m Device Technology TUI Extension: TEE Biometrics API v0.0.0.56.This specification is targeted at TEEs running within smartphones or tablets. It defines and specifies a Trusted User Interface API extension that enables the discovery and identification of all biometric capabilities. Additionally, it offers a complete interface extension for the use of biometric functionality supported by hardware, entirely protected inside the TEE.Please provide your comments to the specification by completing the comment form online by Thursday, 11 May and sending to bio_api_review@globalpl at form.org.

• GlobalPl at form Device Technology Device API Access Control v0.5.0.2. This document defines a standard that enables the control of sensitive APIs in a mobile device operating system, based on access rules stored in a Secure Element. This document is derived from the GP SEAC specification and defines an ARA-D and ARF-D which are similar to the ARA and ARF definitions in the GP SEAC.Please provide your comments by completing the comment form online by Friday, 9 June and sending to: device_api_ac@globalplat fo rm.org.

New specifications available for download

The following specifications are now available for member and public download:

• GlobalPlatform Card Overview of Complete Life Cycle for GlobalPlatform SE Products v1.1 This document presents the overall life cycle of a Secure Element and the involved actors. It also outlines the required steps, including the related minimum security requirements, for Composite Certification. This version of the document includes two new features: Application Update and Platform (OS) Update.
• GlobalPlatfo rm Device Technology TMF: Asymmetric Cryptography Security Layer v1.0 This document specifies a security mechanism, which can be used in the context of the TEE Management Framework for the realization of the security layer.
• GlobalPlat fo rm Card Technology Card Specification – Privacy Framework v1.0The framework, based on the GlobalPlatform Card Specification, allows the management of different privacy mechanisms – such as protection against traceability and of the communication – which remain under the control of the card issuer. In particular, it describes the concepts of Global Privacy Protocol (GPP), Global Master File (GMF) and OPEN Privacy Extension (OPEX).
• GlobalPlatform Systems End-to-End Simplified Service Management Framework Transport v1.0.0 This framework defines a system configuration for the transport industry. It is available as a free download for GlobalPlatform members, and can be purchased by non-members in the GlobalPlatform store.

Member news

GlobalPlatform full member, Trustonic, has become the first company globally to achieve Common Criteria security certification, in line with the GlobalPlatform Protection profile, for a TEE device security product. The certification paves the way for mass market delivery of trusted digital services on connected devices.

Trustonic’s product has also achieved compliance to GlobalPlatform’s latest functional specifications which incorporates the latest feedback from live implementations. Find out more on our website.

Did you miss?

GlobalPlatform has developed the below infographic to highlight three key areas where the TEE can be utilized to deliver increased security – premium content protection, mCommerce/mPayments and enterprise/government environments – demonstrating the importance of this work through some key industry statistics. Check out the full-size version on our website.

Upcoming speaker activity

• Hank Chavers, GlobalPlatform’s Technical Program Manager, is speaking at the International Cryptographic Module Conference (16-18 May, Washington). Hank is delivering a presentation entitled “Common Criteria Protection Profile for Trusted Execution Environment” on Thursday 18 May, 12:20pm — 12:40pm.
• Gil Bernabeu, GlobalPlatform’s Technical Director, is attending the ETSI Security Week (12-16 June, Sophia Antipolis). Gil is delivering a presentation and partaking in a panel within the session “Measuring and Assessing ICT Security”, on Monday 12 June at 2pm. Gil’s presentation is entitled “Supporting the Development of a Global TEE Certification Program”.
• Gil Bernabeu is also taking part in a panel at Connected Cars & Autonomous Vehicles (13-15 June, London) entitled “Approaches to Automotive Cyber Security”, on Wednesday 14 June, 2:20pm — 3:00pm.
• Additionally, Gil Bernabeu will partake in a panel entitled “IoT standards addressing interoperability, legislation and security protocols”, at Internet of Things World Europe (13-15 June, London) on Wednesday 14 June, 3:15pm -3:50pm.

With kind regards,
Kevin Gillick