1

E-Smart 2005Kevin Gillick

Marketing Center Chair, Datacard Group

GlobalPlatform

An organization that:

Creates

Foundation for future growth

Defines

Requirements and technology

standardsfor smart cards,

devices and systems

Promotes

Smart card usage and adoption

What is GlobalPlatform ?

Mission Statement

“Establish, maintain and drive adoption of standards to enable an open and interoperable infrastructure for smart cards, devices and systems that simplifies and

accelerates development, deployment and management of applications across industries “

4

51 Members Worldwide

Matsushita Electric Industrial Co Ltd

DAI NIPPON PRINTING CO.,LTD

Strong Industry AdoptionIndustries with significant momentum in adopting GlobalPlatform specifications:

Financial

Mobile Telecom

Government

Security/ID/AuthenticationSuppliers and application developers

Healthcare

Global DeploymentGlobal Deployment

Over 70 million GlobalPlatform cards deployed worldwide

Additional 450+ million GSM cards globally use GlobalPlatform technology for over-the-air (OTA) application download

Over 30 implementations across the financial, ID/security, government, mobile telecom, healthcare, retail, and transit markets

Estimates predict these figures to increase dramatically in 2005 and 2006

GlobalPlatform technology is implemented in multiple industries

6%

56%22%

13%

Note: FY04 Projections

Healthcare

Financial

GovernmentTelecom

Transit3%

Implementations by Industry

Implementations

Note: FY05 and ‘06 Projections

Number of GlobalPlatform cards projected

19 152 000

50 550 000

70 000 000

160 000 000

0

20 000 000

40 000 000

60 000 000

80 000 000

100 000 000

120 000 000

140 000 000

160 000 000

180 000 000

200 000 000

Nu

mb

er o

f Car

ds

2002 2003 2004 2005 and beyond

Year

Compliance Program

End-To-End Infrastructure

GlobalPlatform delivers the complete set of smart card specifications for an end to end smart card infrastructure

Standardized and secure card and application management

Card Specification Card Compliance Program

Card Security Requirements Spec.Formal Model of Card Spec v2.1.1

Standardized back-end systems: personalization, security, key management,

application loading

Smart Card Management Systems Requirements

Profile SpecificationScripting Specification

Key Management System Requirements

Systems Compliance Program

Device API SpecificationsDevice Application Provisioning

Enable the acceptance of cards through multiple devices

CARDS

SYSTEMS INFRASTRUCTURE

DEVICES

GlobalPlatform Card Specification v2.1.1 & Amendment A

Formal Model of Card Specification v2.1.1

GlobalPlatform Card Specification v2.2(under finalization)

GlobalPlatform Card Compliance Program v2.1.1

GlobalPlatform Card Security Requirements Specification

GlobalPlatform Smart Card Security Target Guidelines(soon to be published)

Card Specifications

Card 2.2 brings additional PKI featuresPK card management

Generic card architecture applicable to both GP v2.1.1 (& v2.0.1) functionality and new PK card managementRe-engineering of Card Manager (Issuer Security Domain, OPEN)

PK secure channel protocolInitialization of secure channel protocol with PK certificatesSecure messaging with DES session keys2 models for DES session keys: real-time / pushUnique card interface: standardized APDUs

Certificate contents & formatMinimum contents requirements

PK services on-card API for applications

Device SpecificationsGlobalPlatform Device / STIP Specifications v2.2

Java and C# versions

Abstract API Specification v2.2Compliant with STIP v2.2 and FINREAD specifications

Device Application Provisioning & Security SpecificationComplements for different types of devices (e.g. mobile handset)Public draft

Device Compliance ProgramTest Plan for GlobalPlatform Device / STIP platform v2.2

Systems SpecificationsSystems Profile and Scripting Language Specifications v1.1

Load and Personalization Interface Specification v1.0Supporting reference for EMV Card Personalization Specification

Key Management System Requirement Specification v1.0Compatible with EMV security and key management requirements

Systems Messaging Specification v1.0

Supporting DocumentationCard Customization Guide Guide to Common PersonalizationSmart Card Management Systems Requirements v4.0

Systems Compliance ProgramTest Plan & Test Suites for Profile and Scripting Specifications

Strategic and Technology PartnershipsStrategic and Technology Partnerships

AICFETSI EurosmartFINREADGSMA INCITSJCFNICSSNISTSCA

Mobile Telecom StandardsETSI: GSM 03.48, TS 23.048ETSI & 3G Smart Card Platform (SCP): TS 102.225, 102.226

Government StandardsUS Federal Government: GSC-IS

ISO: new part 13 of 7816 seriesNew Work Item from Japan: approved by ISO SC17Work assigned to ISO SC17/WG4, editor: JapanScope: commands for application management in multi-application environmentContribution: a subset of GlobalPlatform Card Specification, endorsed by ANSIUS official contribution to ISO

International Standardization

Technical Education Curriculum

Launched at Smart University ’05

Addresses value of the card, device, and systems infrastructure globally and cross-industry

Provides a basic technical understanding of each component

Value of bringing all three components together

Education supplemented with student guide materials

For More InformationFor More Information

To download GlobalPlatform Specifications ‘royalty free’ and for information about becoming a member of GlobalPlatform, visit ourwebsite at:

www.globalplatform.org