GlobalPlatform is trying to make it easier for tech providers to deliver a secure Trusted Execution Environment (TEE). To that end, the standards organization has expanded its security certification scheme to cover individual parts in addition to complete TEE solutions.
In plain terms, that means that the companies that build individual components for TEE solutions can get those components certified before they are assembled as a finished product. GlobalPlatform is hoping that the move will speed up the TEE certification process, which will in turn allow manufacturers to bring new devices to market more quickly. In that regard, developers will know that they meet certain privacy and security requirements before they submit their final TEE because many of the pieces will have been evaluated in advance.
The move is also expected to promote collaboration, since companies will be able to seek out partners that have GlobalPlatform certification. The expanded program covers silicon and component vendors, in addition to OS developers and equipment manufacturers.
“By building products and services from certified parts, manufacturers can be confident that their products meet the robust cybersecurity requirements in place for connected devices,” said GlobalPlatform TEE Committee Chair Richard Hayton. “This approach cuts costs and deployment times for secure devices, and facilitates innovation in an evolving ecosystem.”
“By enabling certification to be achieved at each stage of the value chain, we are helping more stakeholders to demonstrate the value of their technologies, collaborate and build more secure connected devices,” added GlobalPlatform Technical Director Gil Bernabeu.
Alibaba, Huawei, Samsung, Trustonic, and Watchdata are some of the companies that have achieved certification under the new scheme. GlobalPlatform previously updated its Trusted User Interface APIs to support the use of biometric sensors back in 2018.