GlobalPlatform

GlobalPlatform

GlobalPlatform (GP) is an industry standard that defines the infrastructure for managing applications on secure chip technology — smart cards, Secure Elements, and TEEs. It specifies how applications are securely loaded, installed, deleted, and managed on multi-application cards, providing the administrative framework that sits above the card operating system (typically JavaCard).

Key Concepts

GlobalPlatform organizes card management around Security Domains:

Each Security Domain holds its own set of cryptographic keys for authenticating management operations. This key separation ensures that a payment network can manage its applets independently of the telecom operator's applets on the same card.

Secure Channel Protocols

All management operations (applet installation, key rotation, card locking) are protected by a secure channel:

SCP03 is the current production standard, providing AES-based encryption and CMAC integrity protection. SCP11 enables PKI-based authentication, useful for IoT scenarios where pre-shared symmetric keys are impractical.

Card Lifecycle States

GlobalPlatform defines a card lifecycle with controlled transitions:

1. OP_READY — Card manufactured, ready for personalization
2. INITIALIZED — ISD keys loaded
3. SECURED — Production keys set, card ready for deployment
4. CARD_LOCKED — Card temporarily locked (security event)
5. TERMINATED — Card permanently disabled

These states are enforced by the card hardware — once a card reaches TERMINATED, it cannot be recovered. This lifecycle model is critical for personalization bureaus managing the secure issuance pipeline.

GlobalPlatform Beyond Smart Cards

GlobalPlatform specifications extend beyond traditional cards to cover TEE management (GPD_SPE_021), eSIM profile management (in coordination with GSMA), and IoT device security. The GP Device Technology specifications define secure device enrollment, firmware update, and device attestation protocols.