GlobalPlatform provides device makers with standardized technologies and certifications to accelerate secure product development, reduce cost and time to market.
To maximize the appeal and relevance of their products, device makers need to design products flexible enough to run digital applications and services with rich functionality and varying security requirements, while ensuring data privacy and data integrity are maintained regardless of the use case.
GlobalPlatform’s diverse membership collaborates to support device makers with standardized technologies and certifications, enabling them to build, certify, deploy and manage secure-by-design devices.
GlobalPlatform’s standardized technologies enable device makers to meet the regulatory requirements of multiple geographic and industry markets; protecting brand, Intellectual Property (IP) and end user data against the latest attacks with confidence so that device makers can focus on their value add. With GlobalPlatform’s portfolio of offerings, device makers have a range of secure component specifications and Trusted Platform Services (TPS) APIs available to them to integrate trust, based on a Root of Trust (RoT), upon which developers and digital service providers can to develop and deploy their innovative applications and services.
Building on GlobalPlatform’s work to secure the IoT, IoTopia proposes a practical implementation framework for creating secure-by-design approaches for, and certification, deployment and management of, IoT devices in line with global requirements.
Through its functional and security certification schemes, GlobalPlatform enables device makers to verify product adherence to its specifications and protection profiles. Device manufacturers that use GlobalPlatform-certified secure components answer regulatory requirements and can proactively market their products as meeting the functional and security needs of digital service providers, application developers and IoT cloud platforms. Members benefit from reduced fees to access certification services.
GlobalPlatform also enables device makers to adopt the Security Evaluation Standard for IoT Platforms (SESIP) Methodology to accelerate the certification of products across multiple IoT security certification schemes.
Device makers can engage in the work of GlobalPlatform’s Technical Committees and Task Forces to help drive the development of standardized technologies that meet the specific security and business needs of their use cases.
GlobalPlatform Technical Committees manage the maintenance and evolution of GlobalPlatform standardized technologies and certifications. Task Forces provide guidance on market sector and geographical requirements, opportunities, and challenges. These groups are chaired by representatives from GlobalPlatform member organizations.
GlobalPlatform welcomes participation from device makers to learn and contribute best practices, align products to market requirements, contribute key use cases and help drive the organization’s technical roadmap and ensure it answers as many requirements as possible.
Whitepaper: SESIP Applicability for ETSI EN 303 645
As a result of growing cybersecurity threats, device makers are requested to give information about the implementation of security provisions, this includes conformance with ETSI’s cybersecurity requirements for the consumer IoT. This white paper explains how the Security Evaluation Standard for IoT Platforms (SESIP) provides a scalable, time and cost-effective approach to security assessment, making it easier for developers to demonstrate conformance.
GlobalPlatform SE Protection Profile – protect apps and data against high profile attacks
The Secure Element Protection Profile (PP) offers a simple framework for device manufacturers to determine the trustworthiness of components, and select a solution with the required features to protect apps and digital services on their devices. This includes smart card SEs to embedded SEs in smartphones and IoT devices as well as advanced uses cases available on integrated form factors.
Streamline network on-boarding with MUD
Manufacturer Usage Description (MUD) files enable constrained end devices (e.g., IoT devices) to signal to a network, confirming the type of access and network functionality required to properly function. Device makers can use GlobalPlatform’s free MUD File Service to upload MUD files and receive a unique MUD URL for your device.
Become a member