EMVCo, GlobalPlatform and the GSM Association have announced plans to develop a common, cross-industry certification model for secure elements with post-issuance capabilities. The aim is to simplify and speed up testing processes for pre-certified applications and certified UICC platforms, when they are redeployed.
The EMV standards body, EMVCo, the international smart card infrastructure body GlobalPlatform, and global telecoms association the GSMA, have agreed to work together to define functional and security requirements for a common certification process. The resulting document will enable Mobile Network Operators and the payments industry to develop cross-industry certification schemes, for mobile platforms and payments applications respectively.
When fully developed and operational, these schemes will work together to ensure that any certified payment application will work with any certified UICC platform, reducing the incidence of certification failures when new application/platform combinations are subsequently added for testing.
The result will be significantly reduced testing and development costs and a faster time to market. Also, no further certifications will be necessary when loading applications with less stringent security requirements onto new UICC platforms.