GlobalPlatform Enhances Mobile Device Security

GlobalPlatform Enhances Mobile Device Security
11.06.2015 01:00 am

GlobalPlatform Enhances Mobile Device Security


Industry body standardizes a secure channel to optimize security for mobile applications

GlobalPlatform has published an upgrade to its Card Specification v2.2 to protect the data exchange between a secure element (SE) and a trusted execution environment (TEE) on a mobile device. The ‘GlobalPlatform Secure Channel Protocol 11’ addresses the increasing number of use cases, such as mobile banking, where applications utilize both the SE and TEE to protect a secure service. The document is particularly relevant to secure application developers and issuers, and can be downloaded free of charge.

“This advancement focuses on making the best use of security that is already present on the device,” comments Karl Eglof Hartel, Chair of the GlobalPlatform Card Committee and Director for Standards and Innovation in the Mobile Security business unit at Giesecke & Devrient. “Data breaches are growing daily and as more secure services are deployed to mobile devices, hackers will follow. This update seeks to better combine the security characteristics of the SE and TEE, ensuring that the communication channel between them is secure.”

In use cases like biometric authentication, virtual private networks (VPN) or mobile banking, the SE in the device is used to store the critical part of the application and its associated cryptographic keys. In parallel, the trusted application resides in the TEE to enable management of the end user and backend interaction prior to a transaction being authorized. The Secure Channel Protocol 11 protects the data being transferred between these two secure components.  

“The combination of advanced cryptography and the secure components simplifies the delivery of secure services,” adds Karl Eglof. “Data is secure while stored in the SE and TEE, and this channel further strengthens the protection of sensitive data when it is in transit. We have brought forward this update to answer a market need for more effective security and to support the long-term requirements of secure application developers and issuers.”

From a technical perspective, data passed between trusted applications stored in the TEE and SE is protected by the secure channel, which is established by GlobalPlatform’s TEE SE API. Elliptic curve cryptography (ECC) is used for the generation of the session keys for encryption and authentication. It also provides perfect forward secrecy (PFS) by using ephemeral keys, preventing the decryption of the data by attackers, should they also get hold of the long-term keys. 

Related News

Database Monitoring Shown to Improve DevOps Success for Financial Services

A newly released Financial Services edition of Redgate’s 2020 State of Database Monitoring Report reveals the sector is outperforming... Read more »

Atos Becomes Strategic Partner of Student Loans Company

The Student Loans Company (SLC) has appointed Atos, a global leader in digital transformation, to support the delivery of improvements to SLC’... Read more »

25,000 People Pre-register for Chip’s Biggest Funding Round Yet

Chip, the automatic saving app offering access to market leading returns, is about to launch its biggest funding round yet to a record number of pre-registrations. The company... Read more »

Apex Partners with Calypso to Provide Middle and Back-office Services to Ardent Financial

Apex Group Ltd. (“Apex”), a global financial services provider, announces today that it has been appointed to provide front to back office solutions to FCA... Read more »

New Free Whitepaper Helps FSI Businesses Achieve Digital Transformation- Fincons Group

Today, Fincons Group, an international system integration consultancy with offices in Italy, Switzerland, the UK, France, the U.S. and Germany, releases a new free guide to... Read more »

Join CNA, Nationwide and Quadient for a C-Suite Take on Results Driven Technology

It has been made abundantly clear that only the most innovative, fast-moving and customer centric carriers will survive. As the spotlight shines on our industry more than ever... Read more »

Free Newsletter Sign-up
+44 (0) 208 819 32 53 +44 (0) 173 261 71 47
Download Our Mobile App
Financial It Youtube channel