04 May 2017 — Industry association GlobalPlatform has published a technical document which details the service management process to deliver transport ticketing securely on mobile devices. Designed in collaboration with the Smart Ticketing Alliance and the GSMA, the document brings the transport ticketing and mobile communities together to ensure interoperable mobile ticketing is brought to market efficiently and securely using an agreed framework.

The document, entitled GlobalPlatform Systems End-to-End Simplified Service Management Framework Transport v1.0.0, streamlines the management of contactless services by outlining how GlobalPlatform Specifications can be used to deliver transport ticketing services on mobile devices. The framework specifies: the workflows between the involved parties to ensure a seamless end-to-end user experience; the overall architecture to provide clarity in the data flow and implementation; and, the configurations that should be used to ensure interoperability across various interfaces and devices.

"GlobalPlatform’s Specifications provide the architecture to effectively deliver innovative and convenient mobile ticketing services, without compromising security or privacy,” explains Mike Eastham, Chief Advisor - Technology at ITSO Limited and GlobalPlatform Public Transportation Sub Task Force Chair. “This new document is a turning point for mobile ticketing services, bringing a clear and simple guide on how existing standards can be applied. Using this consistent template, the transport community can speed up the deployment of mobile ticketing solutions, optimize existing smart card acceptance infrastructures and ensure interoperability between different transport operators."

The document will be used by public transport operators and system integrators to build the required ecosystem with mobile network operators, secure element vendors and mobile device manufacturers.

John Verity, Smart Ticketing Alliance Chairman, adds: "This technical framework allows public transport operators to deliver mobile ticketing with the same levels of security as their smart card schemes. The recommended standards emulate a smart card within a mobile device using a secure element that can communicate with NFC-enabled ticketing machines. Prior to this framework, fragmentation was widespread; different implementation and management models were created for different devices by different operators in different cities and regions. This level of industry collaboration between the transport ticketing market, the GSMA and GlobalPlatform, streamlines the deployment process and improves interoperability by outlining a basic infrastructure model that is proven and ready to implement."

This is the second framework to be released by GlobalPlatform. The first, which focused on payments, was released in 2014. Both "end-to-end" frameworks act as an entry point to GlobalPlatform for new players. Each actor selects the relevant end-to- end framework by answering a simple set of questions. The configuration selector will filter out the options enabling each actor to determine how to implement its own components for a particular deployment.

The ‘GlobalPlatform Systems End-to-End Simplified Service Management Framework Transport v1.0.0’ is available free to GlobalPlatform Members and can be downloaded from the GlobalPlatform store by non- members.

-ENDS-

For further media information, please contact Lindsay Orr or Erin Lovett at iseepr: lindsay@iseepr.co.uk / erin@iseepr.co.uk or on + 44 (0) 113 350 1922.

Keep up to date with the latest news from GlobalPlatform:

Follow on Twitter: http://bit.ly/wOiHFp
Subscribe on YouTube: https://www.youtube.com/user/GlobalPlatformTV
Join us on LinkedIn: http://linkd.in/xjxsN5

Notes to editors:

About GlobalPlatform
GlobalPlatform defines and develops specifications to facilitate the secure deployment and management of multiple embedded applications on secure chip technology. Its standardized infrastructure empowers service providers to develop services once and deploy across different markets, devices and channels. GlobalPlatform's security and privacy parameters enable dynamic combinations of secure and non-secure services from multiple providers on the same device, providing a foundation for market convergence and innovative new cross-sector partnerships.

GlobalPlatform is the international industry standard for trusted end- to-end secure deployment and management solutions. The technology 's widespread global adoption across finance, mobile/telecom, government, premium content, automotive, healthcare, retail and transit sectors delivers cost and time-to-market efficiencies to all. GlobalPlatform supports the long-term interoperability and scalability of application deployment and management through its secure chip technology open compliance program.

As a non-profit, member-driven association, GlobalPlatform has cross- market representation from all continents. 100+ members contribute to technical committees and market-led task forces. For more information on GlobalPlatform membership visit www.globalplatform.org.

About Smart Ticketing Alliance
The Smart Ticketing Alliance (STA) is established to support the development of interoperable Smart Ticketing. The Founder Members are the smart ticketing organisations in Germany (VdV ETS), UK (ITSO), France (AFIMB) and the Calypso Networks Association, together with UITP (International Association of Public Transport). The Smart Ticketing Alliance AISBL is a non profit distributing association registered in Belgium. For more information visit www.smart-ticketing.org

The document provides a detailed technical framework, explaining how GlobalPlatform technology implements two key concepts that are integral to securing the delivery of digital services, regardless of sector:

Root of Trust (RoT) – A computing engine and its code, data and keys that is as small as possible and offers secure services to other code (like the operating system and applications) hosted in a device. GlobalPlatform Trusted Execution Environments and Secure Elements already fulfill this function in billions of connected devices like smartphones, set-top- boxes and IoT devices.
Chain of Trust – The ability to bind a service to one or more ROTs to offer value added services.

Representatives from the internet of things (IoT) and connected computing industries have worked with GlobalPlatform to develop the technical document as the number and sensitivity of services available through connected devices is growing rapidly.

"Until now, GlobalPlatform secure components have not been presented as meeting RoT requirements, but the functionality has always been present," comments Gil Bernabeu, Technical Director of GlobalPlatform. “This means that device makers and SPs have been unable to use GlobalPlatform SEs or TEEs as a security baseline for RoT services. For the first time, this document outlines how to use GlobalPlatform technology to create RoTs that answer the latest needs of increasingly complex markets and address the presence of numerous stakeholders and devices.

"RoT is an important security concept, but the real value for SPs and OEMs lies in the establishment of Chains of Trust to securely connect services with secure components and/or the device RoT. As billions of devices are being connected to one another the security services offered by secure components are essential to facilitate the protection of information and devices from malicious attacks, and brands from irreparable damage in the wake of hacking."

Several extensions to the functionality of RoTs are included in the requirements document. Firstly, GlobalPlatform supports the process to securely transfer the ownership of a secure component in a multi- stakeholder environment. This is required when a Secure Element manufacturer passes administration ownership of the component to a device manufacturer or car manufacturer, for example. Additionally, with more than one secure component now present in many devices, the combination of multiple ROTs has also been defined.

The document – Root of Trust Definitions and Requirements – is available to download now.

Interested to follow or get involved with GlobalPlatform’s RoT and Chain of Trust activity? Check out the website.

-ENDS-
For further media information, please contact Rob Peryer or Erin Lovett at iseepr:
rob@iseepr.co.uk / erin@iseepr.co.uk or on + 44 (0) 1943 468007

Keep up to date with the latest news from GlobalPlatform:

- Follow on Twitter: http://bit.ly/wOiHFp
- Subscribe on YouTube: http://bit.ly/1BzvLoa
- Join us on LinkedIn: http://linkd.in/xjxsN5

Notes to editors:

About GlobalPlatform
GlobalPlatform defines and develops specifications to facilitate the secure deployment and management of multiple embedded applications on secure chip technology. Its standardized infrastructure empowers service providers to develop services once and deploy across different markets, devices and channels. GlobalPlatform’s security and privacy parameters enable dynamic combinations of secure and non-secure services from multiple providers on the same device, providing a foundation for market convergence and innovative new cross-sector partnerships.

GlobalPlatform is the international industry standard for trusted end-to-end secure deployment and management solutions. The technology’s widespread global adoption across finance, mobile/telecom, government, healthcare, retail and transit sectors delivers cost and time-to-market efficiencies to all. GlobalPlatform supports the long-term interoperability and scalability of application deployment and management through its secure chip technology open compliance program.

GlobalPlatform defines a TEE as a secure area in the main processor in a smartphone, or any connected device. It ensures sensitive data is stored, processed, and protected in an isolated and trusted environment.

As a non-profit, member-driven association, GlobalPlatform has cross-market representation from all continents. 120+ members contribute to technical committees and market-led task forces. For more information on GlobalPlatform membership visit www.globalplatform.org

If you are a media representative, analyst or conference organizer and have a query regarding GlobalPlatform, please contact iseepr:

Tel: +44 (0) 1943 468007
Email iseepr

The Digital Letter of Approval (DLoA) Specification, which is free to download from the GlobalPlatform website, will be of interest to stakeholders wanting to clarify the certification status of secure component products, such as a secure element (SE) or trusted execution environment (TEE), and of applications. This includes trusted service manager vendors, certification bodies, platform and application developers, platform evaluators, issuers, manufacturers and verification authorities.

All Letters of Approval issued by GlobalPlatform are now published on its website in this universal format.

Gil Bernabeu, Technical Director at GlobalPlatform, explains: “Today, multiple applications can reside on one secure component. If product issuers commit to ensuring DLoAs are centrally available and presented in a globally consistent manner, as outlined in our specification, trusted service managers and other parties can quickly and easily validate if a product is secure and if an application can be updated without complication.”

The specification also:
- Clarifies how to access all certification documents (DLoAs) available for a given secure component.

- Improves the management of the certification lifecycle.

- Defines a new entity called a DLoA registrar. A repository that states the interface which enables a management system to retrieve a digital letter.

-ENDS-

For further media information, please contact Rob Peryer or David Amos at iseepr: rob@iseepr.co.uk / david@iseepr.co.uk or on + 44 (0) 1943 468007
Keep up to date with the latest news from GlobalPlatform:

- Follow on Twitter: http://bit.ly/wOiHFp

- Subscribe on YouTube: https://www.youtub e.com/user/GlobalPlatformTV

- Join us on LinkedIn: http://linkd.in/xjxsN5

Notes to editors:

About GlobalPlatform
GlobalPlatform defines and develops specifications to facilitate the secure deployment and management of multiple embedded applications on secure chip technology. Its standardized infrastructure empowers service providers to develop services once and deploy across different markets, devices and channels. GlobalPlatform’s security and privacy parameters enable dynamic combinations of secure and non-secure services from multiple providers on the same device, providing a foundation for market convergence and innovative new cross-sector partnerships.

GlobalPlatform is the international industry standard for trusted end-to-end secure deployment and management solutions. The technology’s widespread global adoption across finance, mobile/telecom, government, premium content, automotive, healthcare, retail and transit sectors delivers cost and time-to-market efficiencies to all. GlobalPlatform supports the long-term interoperability and scalability of application deployment and management through its secure chip technology open compliance program.

As a non-profit, member-driven association, GlobalPlatform has cross-market representation from all continents. 120+ members contribute to technical committees and market-led task forces. For more information on GlobalPlatform membership visit www.globalplatform.org

The FIDO Alliance is making online authentication simpler and stronger by defining open, scalable and interoperable protocols that reduce reliance on passwords. The joint work initiative with GlobalPlatform will bring FIDO authentication to GlobalPlatform Specifications on secure elements (SE) and trusted execution environments (TEE).

"Service providers managing applications on GlobalPlatform-compliant secure SE or TEE products will be able to utilize FIDO's leading authentication functionality, without additional development costs," explains Gil Bernabeu, Technical Director of GlobalPlatform. "Combining our technology expertise in this way will enable us to promote industry adoption of user authentication in a commercially viable and user-friendly manner."

Mid-term, GlobalPlatform will simplify the development of secure FIDO authenticators in products which achieve its SE and TEE functional product qualification and TEE security certification.

Brett McDowell, FIDO Alliance Executive Director, adds: “We embrace every opportunity to work with associations, such as GlobalPlatform, that share a common desire to improve online authentication through the development of open, scalable industry standards. SE and TEE technology plays an important role in isolating and protecting sensitive applications, and there is real value to the market in bringing these standards together. We look forward to sharing further updates as this activity progresses.”

-ENDS-

For further media information, please contact Rob Peryer or Andrew Murgatroyd at iseepr: rob@iseepr.co.uk / andrew@iseepr.co.uk or on + 44 (0) 1943 468007

Keep up to date with the latest news from GlobalPlatform:
Follow on Twitter: http://bit.ly/wOiHFp
Join us on LinkedIn: http://linkd.in/xjxsN5
Subscribe to GlobalPlatformTV:http://bit.ly/1BzvLoa

About GlobalPlatform
GlobalPlatform defines and develops specifications to facilitate the secure deployment and management of multiple embedded applications on secure chip technology. Its standardized infrastructure empowers service providers to develop services once and deploy across different markets, devices and channels. GlobalPlatform’s security and privacy parameters enable dynamic combinations of secure and non-secure services from multiple providers on the same device, providing a foundation for market convergence and innovative new cross-sector partnerships.

GlobalPlatform is the international industry standard for trusted end-to-end secure deployment and management solutions. The technology’s widespread global adoption across finance, mobile/telecom, government, premium content, automotive, healthcare, retail and transit sectors delivers cost and time-to-market efficiencies to all. GlobalPlatform supports the long-term interoperability and scalability of application deployment and management through its secure chip technology open compliance program.

As a non-profit, member-driven association, GlobalPlatform has cross-market representation from all continents. 120+ members contribute to technical committees and market-led task forces. For more information on GlobalPlatform membership visitwww.globalplatform.org

GlobalPlatform has announced five open training sessions in 2016, which will be delivered across Europe, Asia and North America:

- April 2016, London, UK, Europe
- May 2016, Bangalore, India, Asia
- May 2016, Seoul, South Korea, Asia
- Fall, 2016, San Francisco, USA
- October 2016, Paris, France, Europe

GlobalPlatform's Card Specification Training provides an in-depth explanation of the GlobalPlatform Card Specifications, and addresses secure channels, security domains and application programming interfaces. The GlobalPlatform for Contactless Training Session exclusively addresses the role of GlobalPlatform Specifications in relation to contactless-enabled services on mobile platforms. To provide a dynamic learning environment, sessions are limited to a maximum of 15 students.

Kevin Gillick, Executive Director at GlobalPlatform, comments: “There has been a consistent growth in demand for spaces on our training sessions since they were launched in 2009, so our goal for 2016 is to be present on all major continents. This will enable as many students as possible to deepen their knowledge and understanding of the topics covered through a positive engagement with GlobalPlatform instructors in a personal, face-to-face learning environment.

“I am particularly pleased to announce that we will deliver our first open training session in India this year. India's digital economy is booming; the increasing application of digital technologies across the country means that there is a growing interest in GlobalPlatform's value proposition. To respond to local demand, we are planning a training session in Bangalore in Q2. We look forward to engaging with our Indian stakeholders at a local level and reinforcing the many benefits that a standardized infrastructure for the management of applications on secure chip technology can deliver.”

Those interested in attending a training session are invited to visit the GlobalPlatform website for more information and details of how to register: http://www.globalplatform.org/trainingopen.asp.

Since launching its training program in 2009, GlobalPlatform has trained nearly 1000 students in public and in-house sessions delivered across Europe, Asia and the Americas.

GlobalPlatform also offers an online training program, to provide an introduction to key Card Specification topics. The online card training is open to both GlobalPlatform members and non-members. More information can be found at http://www.globalplatform.org/trainingonline.asp.

-ENDS-

For further media information, please contact Rob Peryer or David Amos at iseepr: rob@iseepr.co.uk / david@iseepr.co.uk or on + 44 (0) 1943 468007

Keep up to date with the latest news from GlobalPlatform:

- Follow on Twitter: http://bit.ly/wOiHFp

- Subscribe on YouTube: https://www.youtube.com/user/GlobalPlatformTV

- Join us on LinkedIn: http://linkd.in/xjxsN5

Notes to editors:
About GlobalPlatform
GlobalPlatform defines and develops specifications to facilitate the secure deployment and management of multiple embedded applications on secure chip technology. Its standardized infrastructure empowers service providers to develop services once and deploy across different markets, devices and channels. GlobalPlatform's security and privacy parameters enable dynamic combinations of secure and non-secure services from multiple providers on the same device, providing a foundation for market convergence and innovative new cross-sector partnerships.

GlobalPlatform is the international industry standard for trusted end-to-end secure deployment and management solutions. The technology's widespread global adoption across finance, mobile/telecom, government, premium content, automotive, healthcare, retail and transit sectors delivers cost and time-to-market efficiencies to all. GlobalPlatform supports the long-term interoperability and scalability of application deployment and management through its secure chip technology open compliance program.

As a non-profit, member-driven association, GlobalPlatform has cross-market representation from all continents. 120+ members contribute to technical committees and market-led task forces. For more information on GlobalPlatform membership visit www.globalplatform.org