GlobalPlatform extends security APIs to support developers authenticating users in-app
GlobalPlatform, the standard for secure digital services and devices, has extended the functionality of its Trusted User Interface APIs for service providers and application developers, according to a press release.
The move helps give service providers and application developers a more direct path to provide users with a richer and safer authentication experience and, importantly, to offer trusted biometric authentication that is secured in the hardware of the device's Trusted Execution Environment.
"Sensitive digital services like banking, payments, document signing and access control require strong user authentication and user consent, and to do this users must interact with their device," Gil Bernabeu, technical director of GlobalPlatform, said in the release. "Our work in collaboration with FIDO Alliance and IFAA on the Trusted UI moves away from PINs and passwords processed in the vulnerable device OS, to a world where all sensitive user interactions are secured in the hardware of the TEE."