Secure Element Training

GlobalPlatform has restructured and expanded its Secure Element (card) training program in response to the latest industry demands and developments. The training now offers a more in-depth understanding of the GlobalPlatform SE Specifications. Building on the knowledge gained in the two-day session, an optional third day is now offered and will focus on payments/mobile contactless, mobile identity or secure element for IoT.

Course Description - Two-day Training

Our highly successful SE training provides an in-depth explanation of the GlobalPlatform Card Specifications. This technical training program, taught by experts, demonstrates how GlobalPlatform Card Specifications can be used to support the delivery of digital services in different markets for industrial and consumer use cases. The instructor-led, interactive two-day course has been taken by hundreds of product developers, system integrators, chip manufacturers, and service providers looking to effectively implement the GlobalPlatform Card Specifications into their own business models and product offerings, resulting in significant cost and time-to-market savings.

This is the most comprehensive SE training offered by GlobalPlatform. Please note that this course is taught in English.

Benefits

• Learn how the GlobalPlatform Card Specifications can be used to enable digital services to be trusted and securely managed throughout their lifecycle
• Discover how applications with different security requirements can share the same secure component without affecting market interoperability or restricting the applications’ functionality, by isolating the service
• Learn how to manage trusted digital services with secure end-to-end communications
• Interactive workshops teach students how to design solutions with real world examples
• Instructors provide context and real-world examples of the subject matter
• Class size is limited to foster a personalized learning environment
• Course material given to the students can be easily referenced and used in their projects

Course Objectives

Students will:

• Be able to identify and described the security features of a Secure Element
• Have detailed knowledge of changes in spec versions from 2.2 to 2.3.1
• Learn the GlobalPlatform OPEN functionality and content management
  • the role of security domains
  • the three management models
  • application installation, personalization, and updating
• Understand the importance of configuration
  • learn the details of the Common Implementation Configuration
• Be able to describe the different secure channels and the benefits of each
• Know the process of putting a product through certification
• Understand the principles of System Messaging and Discovery specifications
• Practice their knowledge with three exercises

Course Outline

2-Day Secure Element Training

• GlobalPlatform Overview
• Introduction to SE Specifications
  • SE Architecture
  • Security Domains
  • Card Content Management
  • Management Models
  • Secure Channels
• Advanced SE Specifications
  • Security Domains – Advanced
  • Management Models and Privileges
  • Personalization and Trusted Path
  • Upgrading ELF (Amendment H)
• Specification Version Differences
  • Card 2.1 -> 2.2 changes
  • Card 2.2 -> 2.3 changes
• Knowledge Check – Architect a Service on SE
• Advanced Secure Channel Specifications
  • SCP03 – AES (Amendment D)
  • PKI – (Amendment E)
  • SCP11 – ECKA (Amendment F)
  • SCP80 – ETSI 102 225 & 102 226
  • SCP81 – HTTPS / TLS (Amendment B)
  • SEMS – Amendment I
• Day 2: Refresher on Day one
• Advanced Card Content Management
  • Data Authentication Pattern
  • Confidential CCM (Amendment A)
• Knowledge Check – Deploy a Service
• Introduction to Configurations
  • Common Implementation Configuration
  • CIS 1.0 -> 2.0 changes
  • Consume Centric Model Configuration
• Root of Trust
• Open Firmware Loader
• Certification
  • Digital Letter of Approval
  • Composition Model
• Introduction to System Specifications
• Introduction to End-to-End Simplified Framework
• Final Project – Deploy Service in an Mobile Network Ecosystem

Notes:

• The sessions will be delivered in English by a GlobalPlatform instructor.
• To provide a dynamic learning environment, the sessions are best when limited to a maximum of 15 students.
• All training sessions are conducted in-house. Visit In-House Training for member and non-member fee structure.