TEE Committee (formerly Device Committee)
The Trusted Execution Environment (TEE) Committee is chaired by Richard Hayton from Trustonic. Full and participating GlobalPlatform members are eligible to contribute to this group.
Mission
The TEE Committee defines an open security architecture for consumer and connected devices using a TEE to secure those devices and enable the development and deployment of secure services from multiple service providers.
Objectives:
- Manage, prioritize, develop, maintain and evolve specifications for the TEE, including specifications relating to:
- APIs to communicate to a TEE.
- APIs to develop Trusted Applications (TAs) running within the TEE and enabling interactions with secure peripherals such as the trusted user interface, biometric peripherals and Secure Elements (SEs).
- The TEE Management Framework (TMF).
- Configurations to serve a specific class of devices.
- Advance and maintain the GlobalPlatform TEE Functional and Security Certification Programs to facilitate portability and interoperability of TA deployments on different TEE implementations, and to enable standardized security evaluations.
- Liaise, collaborate and/or coordinate activities with relevant external organizations which perform similar/complementary activities, and support interest in Root of Trust in secure microcontroller units (MCU) and associated secure services.
Current Priorities:
- Standardization – Extending TEE architecture specifications and APIs to include support for hypervisors, making it possible to have two TEEs and two TEE operating systems on the same device.
- RISC-V – Collaboration to support the evolution of chip architecture and address new use cases for Root of Trust services in devices embedding TEE and MCU technologies.
- SESIP – Developing a SESIP Security Profile to answer specific market needs related to secure components.
- TEE security – Identifying and analyzing the latest attacks and updating the TEE Protection profile with the latest methodologies.
The GlobalPlatform TEE Management Framework
The document defines standard methods to manage the lifecycle of the TEE once it is active. In order to support the variety of usage of the TEE in today’s digital world, the document supports a number of deployment models, including: one or many actors; connected or unconnected devices; and one-to-one or one-to-many devices, as well as with symmetric and asymmetric cryptography.
GlobalPlatform TEE Protection Profile
Certified against Common Criteria under its Trusted Computing category, this document specifies the typical threats the hardware and software of the TEE needs to withstand. It also details the security objectives that are to be met in order to counter these threats and the security functional requirements that a TEE will have to comply with.
TEE Compliant Products
GlobalPlatform has developed an open and thoroughly evaluated TEE ecosystem with accredited laboratories and certified products.
The GlobalPlatform TEE Certification Scheme, managed by its TEE Security Evaluation Secretariat, enables vendors to confirm conformance of their TEE products to the organization’s TEE Protection Profile, through independent security evaluation.
Interested in participating in the TEE Committee?
