Collaboration expands secure element access for mobile services
The OMAPI specification defines how mobile applications may access different secure elements (SEs), including the UICC and embedded secure elements (eSEs) in a mobile device and is currently referenced by GSMA, mandated by EMVCo in devices used for contactless payments, and implemented in over 250 models of Android NFC smartphone. This most recent move by SIMalliance will ensure that the technical specification continues to evolve in line with the wider secure chip ecosystem, which is fully represented by the GlobalPlatform membership.
Hervé Pierre, Chairman of SIMalliance, comments: “Since SIMalliance launched the OMAPI Specification in 2011, it has been globally implemented and now plays an extremely important role in enabling mobile services to access SEs across Android devices. As the secure mobile ecosystem continues to evolve and expand, the OMAPI Specification has the potential to play an ever greater role in defining how secure and trusted applications across many platforms, in addition to Android, can utilise the SE to offer enhanced security benefits.
“After very careful consideration, the SIMalliance Board has concluded that transferring the specification to GlobalPlatform is the best way to preserve the integrity of the OMAPI Specification and ensure it is optimised to expand future SE access across applications and devices. This decision has been made easier thanks to GlobalPlatform’s position as an active specifications development body, which will increase opportunities for the integration of OMAPI with other relevant technology, as well as the organisation’s unwavering commitment to developing complementary specifications and certification programs.”
Gil Bernabeu, Technical Director of GlobalPlatform, adds: “GlobalPlatform is a long-standing advocate of the OMAPI Specification, which is already referenced in the organisation’s compliance program. We stand alongside other influential industry bodies, such as GSMA and EMVCo, in recognising the value of this cornerstone technology; we have already used it to develop value added specifications, which enable the control of communication between device applications and SE applications, and which also allow open communication between trusted applications and SEs.
“GlobalPlatform has agreed to take on the development of the OMAPI Specification from SIMalliance, to ensure that it can be expanded in the future to serve new use cases and environments. We are currently exploring the extension of OMAPI to allow web applications to benefit from access to SE applications within a device. This is especially relevant and timely considering the security challenges that the Internet of Things (IoT) looks set to deliver. On behalf of GlobalPlatform I’d like to offer my thanks to SIMalliance for its significant investment in developing the OMAPI Specification to date, and its contribution of this important technology to GlobalPlatform. I can assure all OMAPI stakeholders that GlobalPlatform welcomes this decision by SIMalliance and is committed to the long term development of the specification.”
The current version, OMAPI Specification v3.2 and the corresponding OMAPI Test Suite v2.2, are now available for download from both the SIMalliance and GlobalPlatform websites. The next release of the specification, v3.3, and all future extensions and test suite updates, will be made available for download from the Device Committee pages of the GlobalPlatform website. All archived specifications (v3.2 and earlier) will remain on the SIMalliance website, however any future releases (v3.3 and beyond) will be available on GlobalPlatform’s website.
SIMalliance is the global, non-profit industry association which simplifies aspects of hardware-based device security to drive the creation, deployment and management of secure mobile services. GlobalPlatform is the association which standardizes the management of applications on secure chip technology.
www.simalliance.org
www.globalplatform.org
If you enjoyed this article, you will like the following ones: don't miss them by subscribing to :
