Page 1

Introduction to GlobalPlatform
Certification Secretariat
Details on Functional Certification©2023 GlobalPlatformPage 2

KeyRequirements
for aSuccessfulSecure
Deployment

GlobalPlatform’s technology provides a range ofauthentication, connectivity, privacy andsecurity solutions
123

Protection ofDigital Services

Certification of Secure
Components

Secure Remote
Management ofDigital Services

By addressing theserequirements, GlobalPlatform:• Speeds up alignment between service providers and device
manufacturers on technical and commercial interests• Offers a simpler route to market

Page 3

Why Certify?
•Certifying secure components within devices is essential in facilitating collaboration between service providers anddevice manufacturers.
– Device manufacturers that use GlobalPlatform-certified secure components can proactively market their products
as meeting the functional and security needs of digital service providers. They can effectively illustrate that theirdigital service management capabilities are interoperable and meet industry defined security requirements.

– Service providers recognize this level of assurance, which enables them to select a product that matches theirsecurity and privacy needs.
• GlobalPlatform’s work to develop and maintain a certification program allows stakeholders to verify product adherence
to the association’s technical and security specifications and market-specific configurations. This certification
program provides support on:– Functional certification– Security certification• To achieve certification, a product must be submitted to a GlobalPlatform-accredited laboratory and competently
pass several tests to meet the security evaluation and/or functional testing criteria. The laboratory sends its test report tothe GlobalPlatform Certification Secretariat for evaluation and issuance of a certificate or letter of qualification.

Page 4GlobalPlatform Certification Body
The internationally recognized program is independently operated by a dedicated Certification
Secretariat. It is referenced by EMVCo, GSMA and other industry bodies, with testing
performed on certified tools, provided by GlobalPlatform-approved laboratories globally.
GlobalPlatform Certification Body is an Accredited ISO/IEC 17065 Certification Body (No.:5486.01)• ISO/IEC 17065 Standard specifies requirements, the observance of which is intended toensure that certification bodies operate certification schemes in a competent, consistent andimpartial manner, thereby facilitating the recognition of such bodies and the acceptance ofcertified products, processes and services on a national and international basis and sofurthering international trade.

Page 5FunctionalCertification

Page 6Functional Certification Secretariat Role (extract)•

The Certification Secretariat manages the product qualification process procedures:– Evaluates TestFest results and determines whether GlobalPlatform qualification should begranted to a test tool
– Evaluates laboratory documents and determines whether GlobalPlatform qualification should
be granted to a laboratory– Evaluates product (and derivative product) requests for qualification and communicatesevaluation results– Evaluates appropriate resolution of non-conformance issues reported to GlobalPlatform,
including additional testing, revision or eventual termination of the ‘Letter of Qualification’ for aparticular qualified product (or test tool).

•The role also includes communicating product qualification process status to third parties,
maintenance of product qualification process information on the GlobalPlatform website, and themaintenance of a database that provides the following:– Product qualification process documentation and forms– List of qualified laboratories, qualified test tools, qualified products, self-tested products.

Page 7

Website is a Complete Source for Information
https://globalplatform.org/certifications/functional-certification/

Page 8

Product Qualification❑ Two possibilities:

Self-Testing

Lab Testing

Open to members and non-members

Page 9Self-Testing Process

https://globalplatform.org/self-tested-products/

Page 10

Lab Testing Process*Additional costs of the contract for services
between the test lab and the product provider areoutside the scope of the GlobalPlatform process

https://globalplatform.org/laboratories/

Page 11

Version Management• New releases of test suites are released
when required to address market demand.
• In cases where a new test suite replaces aprevious test suite, a specific schedule iscreated to help users and vendors toaddress potential impact.

Page 12

Qualification of Test
Suite and Test Tools

Page 13

Useful Definitions•‘TestFest’ means an event conducted by GlobalPlatform for purposes of enabling product vendors toengage in cross-testing of products, in order to demonstrate compliance with the relevant and thencurrent GlobalPlatform Specifications for a configuration and category of product.

•‘Test suite’ means a suite consisting of GlobalPlatform testing documentation, test scripts and/or othermaterials, based on a given GlobalPlatform Specification and related configuration, which has beenreleased by GlobalPlatform for purposes of enabling authorized users to develop corresponding
qualified test products.

•‘Configuration’ means a particular set of features and implementation rules as specified by
GlobalPlatform for, or required by, a given GlobalPlatform Specification, such as a configuration formobile or a configuration for government use.

•‘Test tool’ means a tool that integrates any portion of the test suite and is created, developed orproduced for purposes of performing tests on proposed GlobalPlatform compliant products.

•‘GlobalPlatform compliant product’ means a commercial implementation of a product or component
that has successfully demonstrated sufficient conformance with the relevant test suite during an official
test session in an accredited Laboratory.

Page 14

From Specification to Test SuiteSpecification

MarketConfiguration

Scope ofInteroperability(CoverageMatrix)

UML Modeling Tool

Model Development- Implement the specification
with references to therequirement

Test Generation

Test Publication

TestSuite• Test suites are
generally created froma market configuration• A market configuration
mandates somefeatures and provides
implementation rules

Page 15

Compliance Test Suites
Specific License Agreements• Free license for GlobalPlatform members
internal use only
• Commercialization license for GlobalPlatform
member tool suppliers of qualified tools• Commercialization license for GlobalPlatform
member laboratory which delivers qualifiedservices.
Specific agreement developed for standardization
bodies enabling them to review the test suites andendorse the certification program.

Please note that some test suites are free to use.

Page 16

Test Suite and Test Tools Qualification
A TestFest is a meeting, or series of meetings, organized to perform tests between real
products and test tools. A TestFest brings together member organizations in a testing
environment where products can be tested for conformance to a configuration in a variety
of multi-vendor, multi-tool combinations.

The purpose of the TestFest is to validate:- a test suite- and test tools implementing the GlobalPlatform testplan –stability, and of high quality

The TestFest environment also offers participants the ability to interact with one anotherfor purposes of improving their individual products and providing feedback toGlobalPlatform on the specifications/configurations themselves.

Page 17

Qualified Test Labs
- A GlobalPlatform Participating or Full Member

Laboratory must be:- An officially recognized lab (ISO 17025 orequivalent) and/or is already an EMVCo, FIPS,
Common Criteria, PCI qualified laboratory.

Laboratory must use a
GlobalPlatform qualified test tool:- Lab must maintain the test tool to current
revision levels (as required by GlobalPlatform /market needs).

A GlobalPlatform qualified
laboratory must have:- At least one expert which has undertaken GlobalPlatform’s Card
Specifications and Test Suites Training. This is delivered by a
GlobalPlatform Certified Trainer.
-or- Have an expert directly participate in the Compliance Working Group, theTestFest process and use their own qualified tool in their accredited lab.
This must be the same expert who performs testing services at the lab.

Page 18

More information?

Have Questions?
Contact Us
Email the Certification Program Secretariat:
gpcompliance@globalplatform.org

Follow us on Social Media

www.globalplatform.org

Twitter

YouTube@GlobalPlatform_

GlobalPlatformTV

LinkedIn

WeChatGlobalPlatform

GlobalPlatform China

YouKu

GitHub

GlobalPlatform

GlobalPlatform.GitHub.com

Page 19