Simplifying Certification of Digital ID Applets With the Cryptographic Service Provider (CSP) (D21c)
With the implementation of the European Union’s Digital Identity Wallet (EUDI) underway, soon every person living in the EU will have a digital identity applet stored on their smartphone. This means work must be done now to open up embedded secure elements and eSIMs, so that EUDI wallet applications can deliver the high level of assurance (LoA) mandated by the eIDAS 2 regulations.
As one member state will deploy the EUDI applet into multiple smartphones, security evaluation must also be optimized. This talk by GlobalPlatform outlines why the Cryptographic Service Provider (CSP) is a powerful tool to achieve this, easing the deployment of EUDI applications on various secure element platforms. By encapsulating cryptographic asset management, the CSP ensures the integrity, confidentiality, and authenticity of digital communications and data.
Attendees will learn how they can leverage a new standardized CSP API that GlobalPlatform is developing to develop SE applications and the associated processes, and how this is easing Common Criteria certification of digital ID applets. Finally, the organization will explain how it is collaborating with JIL from SOG-IS on this work to define the security evaluation, promote reuse, and reduce fragmentation across the mobile ecosystem.