For inquiries about GlobalPlatform or website assistance, contact secretariat@globalplatform.org.
TPS Committee
The Trusted Platform Services (TPS) Committee is chaired by Jeremy O’Donoghue from Qualcomm. Full and participating GlobalPlatform members are eligible to contribute to this group
Mission
The TPS Committee creates open specifications that provide mechanisms enabling access to platform services offered by standardized secure components (such as the SE and TEE), both from within a device and from platforms external to it.
These assure the trustworthiness of a secure component within a device enabling a secure service, thanks to an attestable Chain of Trust (from the Root of Trust (RoT)) to the application or the cloud).
The aim is to make it easier for service providers and application developers in different market sectors to link together the strong security technology offered by secure components in their products. This will be achieved through GlobalPlatform’s Device Trust Architecture (DTA).
Objectives:
- Develop and maintain the existing GlobalPlatform Specifications by defining high-level platform services.
- Collaborate with existing technologies already available in the marketplace.
- Define new specifications or open-source deliverables for devices hosting secure applications relying on a chain of trust anchored on RoT and secure boot.
Current Priorities:
- Standardization - Publishing TPS Keystore and TPS Client API Specifications, as the first APIs to access the secure services provided by the Root of Trust in devices, including SE, TEE and MCU.
- Open source - Driving the open-source implementation of TPS APIs to reduce the complexity of device connectivity / onboarding for device manufacturers in industrial and consumer IoT markets.
- Software attacks - Publishing guidance on vulnerability analysis for software attacks.
On Device NFC Service Management Specification
GlobalPlatform Managing Entity Specification completes a ‘stack’ of complementary software standards from ETSI and the NFC Forum that ensures multiple mobile contactless services successfully coexist within a device and will operate as intended, regardless of the hosting environment selected by the service provider.
SE Remote Application Management
This document defines a single administration protocol to perform remote management of applications residing on any type of SE in a device. By using this protocol, service providers can develop flexible remote administration platforms that could be easily extended to manage the same application in any SE.
SE Access Control
The Secure Element Access Control Specification is used in addition to existing protection mechanisms (such as permissions or security OS policy limiting access to sensitive APIs). It is designed to prevent unauthorized access to resources in the SE and typically to prevent denial of services attacks (e.g. PIN blocking, selection of non multi-selectable applets).
Interested in participating in the TPS Committee?
