GlobalPlatform Announces Board of Directors for 2023
GlobalPlatform  has announced its Board of Directors for fiscal year 2023. Stéphanie El Rhomri of Fime continues in her role as Chair, with Olivier Van Nieuwenhuyze of STMicroelectronics elected to the position of Vice Chair. Claus Dietze of Giesecke + Devrient Mobile Security takes over from Olivier as GlobalPlatform Treasurer and Secretary. GlobalPlatform has also confirmed its Board members for 2023, where six seats were open. The following will serve a two-year term:
• Claus Dietze – Giesecke+Devrient Mobile Security
• Eikazu Niwano – NTT Corporation
• Marc Kekicheff – Visa
Together, the group will continue GlobalPlatform’s work to bring trust and security to digital services and devices, with a strategic focus on driving initiatives that are supporting stakeholders from across different industries to respond to emerging cybersecurity requirements:
• Automotive cybersecurity: bringing the automotive value chain together to address requirements and foster solutions for cybersecurity management of secure components, over-the-air software updates and security evaluation, related to market demands and new automotive regulatory requirements from, for example, UNECE 155, UN 156, Right to Repair and SBOM. • Digital identity wallets: identifying digital identity wallet use cases where GlobalPlatform technologies can enable security, privacy and frictionless deployment, with an immediate focus on the European Digital Identity Wallet scheme and addressing the long-term needs of European governments engaged in large-scale ID and eID deployments. • IoT security certification: driving market adoption and recognition of the Security Evaluation Standard for IoT (SESIP) methodology, to simplify and lower the cost and effort of IoT security evaluation. • Post-Quantum Cryptography (PQC) migration: enabling organizations to prepare towards the support of new cryptography trends and technologies, by examining how hybrid-cryptography can be implemented to ensure high levels of security, the protection of data and communication systems, and providing guidance on the approach to deploy for each phase of the migration to post-quantum cryptography. • Software Bill of Materials (SBOM): analyzing the impact and providing guidance for the deployment of SBOM for telecoms, the medical device industry and automotive market, including a consistent means to produce, consume and exchange, software transparency and assurance information.

GlobalPlatform Announces Board of Directors for 2023

SESIP's role in the IoT ecosystem
Gil Bernabeu, Technical Director, GlobalPlatform

-
Opinion

SESIP's role in the IoT ecosystem

Experts from Amazon, Arm, Microsoft , NXP and others to demonstrate how the SESIP methodology reduces cost and complexity in security evaluation
September 21, 2022 07:13 AM Eastern Daylight Time
BARCELONA, Spain--( BUSINESS WIRE )-- GlobalPlatform , the standard for secure digital devices and services, will host a Security Evaluation Standard for IoT Platforms (SESIP) methodology seminar in Barcelona on October 19. The full-day seminar explores how the methodology is positioned in the context of European regulations and offers an optimized approach for evaluating the security of connected products that meets the specific compliance, security, privacy and scalability challenges of the evolving IoT ecosystem. “SESIP reduces complexity and cost from security certification processes for stakeholders throughout IoT, by mapping different schemes from industry leading organizations such as ENISA, ETSI, IEC and NIST,” comments Gil Bernabeu, GlobalPlatform Technical Director. “In Barcelona, GlobalPlatform brings key players from these organizations, as well as individual companies that have benefitted from the methodology, to explore real life implementations and showcase the business case of SESIP to the entire ecosystem.”
The SESIP methodology also allows for the ‘composition and reuse’ of certified components, so that they can be used to meet requirements of multiple markets. The seminar will be presented by keynote speakers from CEN/CENELEC, STMicroelectronics and Winbond and involve live panel discussions and use cases, presented by speakers from Amazon, Arm/PSA Certified, ETSI, ECSO, Eurosmart, Microsoft, and many more. Sponsored by Winbond, STMicroelectronics and SGS Brightsight, the seminar takes place at the Gran Hotel Havana . It will also be available virtually for those unable to travel. Register for the seminar here . ENDS
About GlobalPlatform
GlobalPlatform is a technical standards organization that enables the efficient launch and management of innovative, secure-by-design digital services and devices, which deliver end-to-end security, privacy, simplicity and convenience to users. It achieves this by providing standardized technologies and certifications that empower technology and service providers to develop, certify, deploy and manage digital services and devices in line with their business, security, regulatory and data protection needs. GlobalPlatform technologies are used in billions of smart cards, smartphones, wearables and other connected IoT devices. GlobalPlatform standardized technologies and certifications are developed through effective industry-driven collaboration, led by multiple diverse member companies working in partnership with industry and regulatory bodies and other interested parties from around the world.

GlobalPlatform Brings IoT Security Certification Seminar to Barcelona

News provided by
Share this article
Share this article
The OSIA qualification program aims at enhancing interoperability of ID management systems, support ID solution development, and address government requirements for OSIA compliance. MARRAKESH, Morocco, June 15, 2022 /PRNewswire/ --  Secure Identity Alliance  (SIA), the global identity and secure digital services advisory body, today announces the OSIA Qualification Program at the ID4Africa 2022 General Meeting. Developed in response to the growing number of government bodies looking to ensure compliance with OSIA specification as a pre-requisite in their tendering processes, this program allows ID vendors to certify their solutions as 'OSIA-Qualified'. open standard identity apis (PRNewsfoto/Secure Identity Alliance)
The OSIA Qualification will be adjudicated by an independent body, GlobalPlatform , who will issue the 'OSIA-qualified' mark to the vendors after the successful assessment of their products/solutions against the OSIA test plan, developed by FIME . Matthew Cole, Chairman at Secure Identity Alliance, said: "The importance of openness and interoperability within the identity ecosystem cannot be underestimated. Not only does this drive product and solution innovation, it enables governments to confidently invest in the future-proofed national identity schemes that underpin social and economic development. OSIA's role in ensuring seamless connectivity between all components of the identity management ecosystem is well established – and this Qualification Program provides an important marker of compliance." "Creating trusted digital identities has become a critical priority to support a broad range of use cases, enabled by the growing number of connected devices. GlobalPlatform is proud to bring its 15 years of experience in qualification to support SIA with this important initiative to bring interoperability and ensure digital IDs can be accepted with confidence," commented Ana Tavares Lattibeaudiere, Executive Director at GlobalPlatform. "As a standards body working for the mass market, GlobalPlatform recognizes the value of compliance and qualification in making standards a success and we're pleased to support the OSIA Qualification Program." Alongside the launch of the OSIA Qualification, SIA will be represented at the Digital Public Infrastructure/Digital Stacks workshop by Debora Comparin, Chair of the OSIA Initiative. Debora will be discussing the role of open standards, such as OSIA, in helping to build Digital Public Infrastructure/Digital Stacks, create a level playing field within the vendor space, and how these nurture the development of local services markets. For more on the work of the SIA and to explore the OSIA Qualification program in more detail, visit us at ID4Africa 2022 at booth A0.7. About the Secure Identity Alliance
The Secure Identity Alliance (SIA) is an expert and globally recognised not-for-profit organisation. We bring together public, private and non-government organisations to foster international collaboration, help shape policy, provide technical guidance and share best practice in the implementation of identity programmes. Underpinning our work is the belief that unlocking the full power of identity is critical to enable people, economy and society to thrive. For more information on the Secure Identity Alliance, visit: www.secureidentityalliance.org . Follow the Secure Identity Alliance at @secureidentity1 on Twitter
Follow the Secure Identity Alliance at https://www.linkedin.com/company/secure-identity-alliance/
Press Contact: Stéphanie de Labriolle [email protected]  
About GlobalPlatform
GlobalPlatform is a technical standards organization that enables the efficient launch and management of innovative, secure-by-design digital services and devices, which deliver end-to-end security, privacy, simplicity and convenience to users. It achieves this by providing standardized technologies and certifications that empower technology and service providers to develop, certify, deploy and manage digital services and devices in line with their business, security, regulatory and data protection needs. Key offerings include secure component specifications; the Device Trust Architecture for accessing secure services within a device; the IoTopia Framework for secure launch and management of connected devices; and the SESIP Methodology for IoT device certification. GlobalPlatform technologies are used in billions of smart cards, smartphones, wearables and other connected and IoT devices to enable convenient and trusted digital services across market sectors, including healthcare, government and enterprise ID, payments, smart cities, industrial automation, smart home, telecoms, transportation, utilities, and OEMs. GlobalPlatform standardized technologies and certifications are developed through effective industry-driven collaboration, led by multiple diverse member companies working in partnership with industry and regulatory bodies and other interested parties from around the world.

10:40 EDT
Secure Identity Alliance launches OSIA Qualification Program at ID4Africa

News provided by
Share this article
Share this article
With SESIP level 2 certification, W77Q Secure Flash will provide connected devices a higher level of assurance by simultaneously requiring a vulnerability analysis and actual penetration testing on IoT platform design systems using Secure Flash in compliance with security and functional safety standards simultaneously. TAICHUNG, Taiwan, June 1, 2022 /PRNewswire/ -- Winbond Electronics Corporation, a leading global supplier of semiconductor memory solutions, today announced that the Company's TrustME® W77Q Secure Flash had obtained Security Evaluation Standard for IoT Platforms (SESIP) Level 2 with Physical Attacker Resistance Certification. This is the first certification using GlobalPlatform® SESIP Profile for Secure External Memories, and NIST 8259A (IoT device cybersecurity capability core baseline). The certification also claims compliance with IEC 62443 (security for industrial automation and control systems). With the prestigious industry-recognized security certification, TrustME W77Q Secure Flash can simultaneously satisfy emerging cybersecurity demands in IoT applications. Winbond TrustME®& W77Q Secure Flash Obtains SESIP Level 2 with Physical Attacker Resistance Certification
The W77Q family has also been certified with the Common Criteria EAL2+, Functional safety ISO26262 ASIL-C level and FIPS 140-3 CAVP. W77Q Secure Flash comes in densities of 16Mb, 32Mb, 64Mb and 128Mb; it operates at a frequency of 66MHz in Double Transfer Rate mode and 133MHz in Single Transfer Rate mode. It features a standard single/dual/quad/QPI serial peripheral interface (SPI) and industry-standard packages and pin-outs to facilitate their uses as a drop-in replacement for non-secure SPI NOR Flash devices. W77Q Secure Flash can retain data for over 20 years and perform 100,000 Program/Erase cycles with a wide operating temperature range of -40°C to 105°C. Security Features
Complementary to the host chip, W77Q Secure Flash provides the security features of secure boot code storage and authentication, secure firmware update, remote attestation for building platform Root of Trust and firmware resiliency. These outstanding security features are enabled by the below security functions from the perspectives of protection, detection, and recovery:
Data confidentiality
DICE-like attestation mechanism
Authenticated Watchdog Timer with an optional hardware reset output
Secure firmware over-the-air update, via an end-to-end secure channel between an update authority (a.k.a. OTA server) and the W77Q even when the host processor or SoC has been compromised. "We would like to congratulate GlobalPlatform Full Member Winbond for achieving SESIP Level 2 certification," adds Ana Tavares Lattibeaudiere, Executive Director of GlobalPlatform. "SESIP is helping IoT product manufacturers, like Winbond, comply with specific security requirements and regulations. Because the methodology is mappable to other evaluation methodologies, and compliant with many standards and regulations, it reduces the complexity, cost and time-to-market for IoT stakeholders as we all work to bring greater trust to the IoT ecosystem." "In the world of connected devices, security is becoming strategic for risk management, market differentiator and compliance. Many standards and regulations are emerging across regions and verticals. Standards like IEC 62443, NIST 8259A and others are looking to address core security functionality. SESIP has rapidly grown internationally as the recognized certification going beyond the security fragmentation. As an optimized version of CC applied to IoT market, SESIP is providing evidence of secure products by design. The proper protection of stored data is a key element of the overall security of devices." says Carlos Serratos, Director of Strategy at SGS Brightsight. Carlos goes on to say, "SGS Brightsight congratulates Winbond with the successful certification of their W77Q16/32 Secure Flash Memory under SESIP and CC, an achievement on itself that gets enhanced for proving its readiness for applications in the scope of IEC 62443 and NIST 8259A. Glad to be the Winbond partner in its security journey!" About Winbond
Winbond Electronics Corporation is a leading global supplier of semiconductor memory solutions. The Company provides customer-driven memory solutions backed by the expert capabilities of product design, R&D, manufacturing, and sales services. Winbond's product portfolio, consisting of Speciality DRAM, Mobile DRAM, Code Storage Flash, and TrustME® Secure Flash, is widely used by tier-1 customers in communication, consumer electronics, automotive and industrial, and computer peripheral markets. Winbond is headquartered in Central Taiwan Science Park (CTSP), and it has subsidiaries in the USA, Japan, Israel, China, Hong Kong, and Germany. Based on Taichung and new Kaohsiung 12-inch fabs in Taiwan, Winbond keeps pace to develop in-house technologies to provide high-quality memory IC products. TrustME® is a trademark of Winbond Electronics Corporation. All other product names that appear in this material are for identification purposes only and are acknowledged trademarks or registered trademarks of their respective companies. Product Contact

11:00 EDT
Winbond TrustME® W77Q Secure Flash Obtains SESIP Level 2 with Physical Attacker Resistance Certification

RISC-V is chartered to standardize and promote the open RISC-V instruction set architecture together with its hardware and software ecosystem for use in all computing devices.

RISC-V

Gil Bernabeu , Technical Director at GlobalPlatform , adds , `` GlobalPlatform has established strong collaborative relationships with key industry partners across the world and we are pleased to count RISC-V among them .

RISC-V International and GlobalPlatform Partner to Enhance Security Design of IoT Devices - RISC-V International

TCG specializes in tailored information technology solutions and consulting services with a particular focus on grants management, collaboration platforms, and budget formulation and execution. TCG transforms information technology infrastructures and inconsistent processes to integrated environments built on reusable functionality, consistent business processes, and interoperable infrastructures. The multiple awards that TCG and its clients have received demonstrate the benefits of using best practices such as CMMI, ITIL, and PMBOK to meet complex technology and management needs.

Ali Corporation

ALi is a system-on-chip (SoC) design company for digital multi-media. It specializes in digital multi-media SoC and set-top box SoC. The company offers products such as set-top boxes and ALiIN, an AI computing platform for smart indoor applications. It was founded in 1993 and is based in Taipei City, Taiwan.

Trusted Computing Group (TCG) is a non-profit organization that develops and promotes open, vendor-neutral, global industry specifications and standards. It is supportive of a hardware-based root of trust for interoperable trusted computing platforms. It was founded in 2003 and is based in Beaverton, Oregon.

Trusted Computing Group

GlobalPlatform is a non-profit industry association. GlobalPlatform defines and develops specifications to facilitate the secure deployment and management of multiple embedded applications on secure chip technology standardization worldwide. It is based in Redwood City, California.

Wells Fargo Success Story

Professional Services

Platform Overview

GlobalPlatform

Compete with GlobalPlatform?

Compete with GlobalPlatform?

Discover the right solution for your team