The GlobalPlatform Value Proposition for Remote Post-Issuance Secure Access Modules (SAM) Management
As the number of onboard applications present on smart chips has increased, so have the authentication responsibilities of the Secure Access Module (SAM), as well as the complexities of the processes involved. This has meant that implementing changes to the SAM have, to date, only been applied pre-issuance.
This white paper details how post-issuance 'over-the-air' management of the SAM can be achieved in a standardized and interoperable manner. This will eliminate the need to issue new chips with each SAM update, and enables the keys and certificates for each onboard application to be updated without interfering with those of other parties.