Simplifying letters of approval

Industry association GlobalPlatform has released a specification which standardizes the digital format of Letters of Approval issued from certification bodies and standardizes how they can be retrieved. This clarity will simplify the process for validating the functional compliance and security certification status of a secure component product or of an application.

The Digital Letter of Approval (DLoA) Specification, which is free to download from the GlobalPlatform website, will be of interest to stakeholders wanting to clarify the certification status of secure component products, such as a secure element (SE) or trusted execution environment (TEE), and of applications. This includes trusted service manager vendors, certification bodies, platform and application developers, platform evaluators, issuers, manufacturers and verification authorities.
Gil Bernabeu, Technical Director at GlobalPlatform, explains: “Today, multiple applications can reside on one secure component. If product issuers commit to ensuring DLoAs are centrally available and presented in a globally consistent manner, as outlined in our specification, trusted service managers and other parties can quickly and easily validate if a product is secure and if an application can be updated without complication.”
The specification also:
·         Clarifies how to access all certification documents (DLoAs) available for a given secure component.
·         Improves the management of the certification lifecycle.
·         Defines a new entity called a DLoA registrar. A repository that states the interface which enables a management system to retrieve a digital letter.
“It is important that product testing and security certification activity does not become a barrier to adoption,” adds Gil. “While the need to confirm the security and performance of a product is paramount, we must continually seek ways to streamline these processes and better align to the product lifecycle needs of the connected device marketplace. This specification defines a relatively easy approach to manage the security of secure component products that carry sensitive and/or basic applications and simplify post-issuance management of applications.”
Fivetran accelerates global financial services provider’s move to the cloud; transforms reporting...
Freshservice Journeys is a AI-powered capability that simplifies complex workflows spanning HR, IT,...
Over 40% of agentic AI projects will be cancelled by the end of 2027, due to escalating costs,...
The majority (83%) of IT and business professionals in Europe believe employees in their...
Whitelane Research, an independent organisation specialising in IT sourcing research across Europe,...
As demand for data-driven insights increases, data overload could render UK businesses...
The majority (83%) of IT and business professionals in Europe believe employees in their...
DXC Technology and Carnival Cruise Line, have announced a multi-year agreement to power the cruise...