NFC standards organization GlobalPlatform has announced that it is advancing its "Composition Model" to make it faster and easier for developers and product issuers to perform security evaluations on their NFC contactless apps.

The GlobalPlatform Composition Model defines an easy approach to certifying the security of secure element products that carry either sensitive or basic applications, and makes it easier to manage those applications after they have been issued.

With the GlobalPlatform model, security evaluations of applications can re-use existing security evaluation results as well as limit the scope of testing to looking only at the impact of new application and SE combinations.

GlobalPlatform said the streamlined methodology means that the telecom and payment industries can now redeploy SEs and applications more easily once they have been certified. 

GlobalPlatform said that a composite product falling under the model would include an open platform such as a secure element with one or more secure applications, as well as possibly one or more basic applications.

As secure elements on mobile devices are called upon to host multiple applications, it's crucial that deployed applications work as intended and do not interfere with other services, GlobalPlatform said. Evaluating the security of applications before and after issuance is therefore vital, but should be cost- and time-effective, it said.

"Most of the applications we have on our mobile handsets today have low security requirements," said Gil Bernabeu, technical director at GlobalPlatform. "As we start to add applications that connect to our bank accounts or identity, the need to protect an application is crucial. Security evaluation can be expensive and time consuming and while it is imperative that the industry adheres to the highest security standards, it is important that products can be brought to market quickly."

Bernabeu said the organization's work is intended to streamline the security testing process, which will encourage application developers to validate the security of their applications without stifling innovation and product advancements.

"The GlobalPlatform Composition Model also encourages basic applications to be validated against a given set of applicable security rules," Bernabeu said. "Basic application developers need to understand their responsibilities as more and more services are downloaded onto mobile devices."

GlobalPlatform said its Card Composition Model has been developed in cooperation with both payment standards body EMVCo and mobile industry group GSMA.

For more stories like this, visit the contactless/NFC research center.

Related Content

User Comments – Give us your opinion!
Products & Services

WAP Billing and PayForIt

http://global.networldalliance.com/new/images/products/4527.png

4527/WAP-Billing-and-PayForIt

Total-Mobile Swipe

http://global.networldalliance.com/new/images/products/6203.png

6203/Total-Mobile-Swipe

Highway Toll Payment

http://global.networldalliance.com/new/images/products/6747.png

6747/Highway-Toll-Payment

Managed API Exposure

http://global.networldalliance.com/new/images/products/7051.png

7051/Managed-API-Exposure

JunglePay - Mobile Payment and Online Billing Solution

http://global.networldalliance.com/new/images/products/4534.png

4534/JunglePay-Mobile-Payment-and-Online-Billing-Solution

Infobip Push Notifications

http://global.networldalliance.com/new/images/products/6127.png

6127/Infobip-Push-Notifications

Payforit

http://global.networldalliance.com/new/images/products/5929.png

5929/Payforit

Cellum Web Checkout

http://global.networldalliance.com/new/images/products/6737.png

6737/Cellum-Web-Checkout

Mobile Money Cash Solution

http://global.networldalliance.com/new/images/products/6415.png

6415/Mobile-Money-Cash-Solution

QwickPAY Mobile POS

http://global.networldalliance.com/new/images/products/4293.png

4293/QwickPAY-Mobile-POS

VAS Show London 2014
ATM & Mobile Innovation Summit
Request Information From Suppliers
Save time looking for suppliers. Complete this form to submit a Request for Information to our entire network of partners.