Published on: Sep 4, 2023
In brief…
The essentials for securely managing services on the Secure Element, shared between MNOs & service providers.
COURSE DESCRIPTION
Mobile NFC is a typical use case which requires co-operation between different stakeholders, each with their own culture and expectations. The overall requirements are: – the need to easily design, deploy & operate services with security and confidentiality.
GlobalPlatform 2.2 is the interoperable standard to allow a secure implementation & communication between parties.
This training will help you to better understand the GlobalPlatform specifications, including GP2.2 specifications for configuring Secure Element, the amendments A, B, C….for contactless parameters & confidential SE content remote management.
AT THE END OF THE TRAINING YOU WILL
- Understand the GlobalPlatform 2.2 Smart Card Spec main functionalities
- Be able to describe how the different actors (Mobile Operators, MVNOs, and Transport Operators) can share the same Secure Element (SE).
- Understand how to access a GP SE and its applications ‘Remotely’
- Be able to describe the main features and structure of the GlobalPlatform 2.2 related standards (UICC configuration, Amendment A…)
WHO SHOULD ATTEND ?
All people involved in Secure Element projects:
- Secure Element Architects,
- Developers
- Product dev team
- Technical team
- Operational Team
- Security Managers
PRE-REQUISITES
Smart Card basics would be useful, but not mandatory.
Please confirm that participants can read and understand spoken technical English. Other spoken languages (French…) may be available. Contact us.
TEACHING METHODS
Courses include theoretical session presentations made by the trainer, and generally include demos/hands-on exercises so students can reinforce the theory with practice.
KNOWLEDGE ACQUISITION METHODS
Quizzes are also used to ensure each student can check his/her acquisition of key concepts, and to allow the trainer to go back over points that may need reinforcing.
Certificates of training completion are systematically delivered to students who complete our training courses.
ACCESSIBILITY FOR DISABLED PERSONS
If you have specific requirements for participants at your site, please contact us.
DEADLINE AND REQUIREMENTSS FOR REGISTERING ATTENDEES
The names and contact details (email…) of the identified participants are required at the latest 2 weeks before the start date of the session.
LANGUAGE & KNOWLEDGE SERVICES
- This training course is usually held in English. Please confirm that participants can read and understand spoken technical English. Presentation in another language may be possible on request (documents in English).
- We can deliver in one of the following forms :
- Public sessions : Usually recommended for companies with a small number of people requiring training, public sessions are involving attendees (from 4 up to 12) from different companies in the same training session, creating very rich sharing and networking situations. This is also a perfect way to get away from the day-to-day bustle of the office, in a quiet and discreet learning environment, with fully equipped rooms including AV, flip charts, IT infrastructure for practical exercises…
- Dedicated sessions Usually recommended for companies with multiple people requiring training. The training will be organized in your premises, or in a place of your choice, scheduled at your convenience, helping you to save money on travel expenses and reduce time out of the office. Courses can be customized (content / duration / place) to your real specific needs in order to ensure programs are even more job related and that new skills are immediately usable.
- Expertise assistance Sometimes, training is a good start… But work on complex projects may require more : accessing an expert to raise questions or concerns, get particular advices to solve a difficult situation, gather benchmarks for a case to avoid common traps and take the right decision… This is exactly where experts NODE can help you along the way, and package assistance bricks (remote or on-site, on the spot, project based, or regular) to help you apply knowledge on your specific cases.
- Consulting : Sometimes the need is even more specific and this is where errors can cost time, money, image loss… From early strategic stage where you need state of the art return of experience, data and facts coming from existing projects to take the right decisions up to deployment phase where the keywords become customer experience, adoption, usage boosting, our experts an ad-hoc teams can help you to avoid common traps and benefit from the most advanced best practices.
Course Features
- Lectures 19
- Quizzes 2
- Duration 2 days
- Skill level All levels
- Language English / French
- Students 273
- Assessments Yes
Curriculum
- 9 Sections
- 19 Lessons
- 2 Days
- Mobile Ecosystem - Introduction4
- GlobalPlatform 2.27
- 3.1Context and Needs
- 3.2Multi-application card and security architecture
- 3.3GlobalPlatform Commands (Java Card Application management)
- 3.4Security Domain, privileges and commands
- 3.5Business models (simple, AM, DM)
- 3.6SCP02, OTA and HTTPs security, and Key management : Brief overview of Amendment D (SCP03)
- 3.7Differences between GP2.1 & GP2.2
- GlobalPlatform Access Control2
- UICC config2
- Card Compliance Program2
- Amendment A1
- Amendment B1
- Amendment C1
- Wrap-Up & Conclusion1