GlobalPlatform releases secure customer authentication specification

GlobalPlatform has released a new specification designed to simplify the integration of strong customer authentication (SCA) for payments, banking, transport and identity applications.

GlobalPlatform

“Originally developed within EMVCo, the global technical body that facilitates the worldwide interoperability and acceptance of secure payment transactions, the Secure Element Broker Interface defines a standard to make end-user authentication simpler for all applications running in a GlobalPlatform-certified secure element (SE),” the standards organisation says.

“It enables service providers to easily develop secure apps that utilise the authentication mechanisms available in the device, which are now known as consumer device cardholder verification methods (CDCVM).

“The specification means developers no longer need multiple app versions for different device operating systems or models. It also accelerates the rollout of contactless biometric payment cards.

“Regardless of whether a consumer is using a biometric card or a smartphone, they can rely on a single secure authentication method for all apps stored in the device, rather than remembering multiple PINs and passcodes.”

“The specification also supports FIDO authentication and GlobalPlatform will extend the application of the application programming interface (API) beyond mobile payments,” it adds.

“GlobalPlatform’s SE technology is widely deployed across sectors including enterprise ID, government and transport. It means the new interface can be used to support authentication services for a variety of use cases, and increase interoperability among digital service providers, original equipment manufacturers (OEMs) and application developers.”

“The Broker Interface supports two of today’s big trends: unified user authentication and strong customer authentication for smartphones, smart wearables and contactless cards. And this is about simplifying everyone’s lives,” says Gil Bernabeu, GlobalPlatform’s technical director.

“Developers no longer have to adapt their solutions for different devices and wallets, and end users get a more consistent experience across their services.”