#London #UK #Licel #vTEE #Trusted Applications

Licel's Enhanced Security for iOS Apps

In a significant advancement for mobile security, Licel has introduced a state-of-the-art method for securely delivering Trusted Applications directly to existing iOS applications. This enhancement enables payment service providers, issuers, and teams focused on digital identity to deploy new features on users' devices without requiring updates to the original host application.

This innovative secure over-the-air (OTA) delivery mechanism extends the capabilities of Licel's vTEE (virtual Trusted Execution Environment), tested and approved by Applus+ Laboratories as part of its ongoing compliance with EMVCo's standards. Now, developers can seamlessly push critical updates involving sensitive payment transactions, identity checks, and cryptographic functions to their users on-demand, reflecting the evolving nature of mobile app security post-deployment.

How It Works

Each update process harnesses three intricate security layers. Trusted Applications are transmitted over an encrypted channel, utilizing the GlobalPlatform's secure channel protocol, ensuring that only authorized packages from app vendors may be installed. This stringent control means that providers maintain comprehensive oversight of operational elements within their apps. Once the update is completed, each new Trusted Application operates in a secured, isolated environment, residing within the Licel vTEE embedded in the app safeguarded by DexProtector technology.

Licel’s OTA delivery model mimics long-standing practices in payment and telecommunications sectors where applets are provisioned on SIM cards and other secure components. By adopting this well-established framework, Licel's vTEE allows issuers and digital wallet providers to adopt a familiar process for their mobile app infrastructure.

Trusted Application Development

Developers can utilize JCardSim, an open-source Java Card simulator provided by Licel, to create and test Trusted Applications. This combination of development and deployment capabilities fosters a secure environment where new applications can be launched efficiently and effectively. With the renewed approval for the Licel vTEE under the EMVCo’s SBMP TEE category, it enjoys validation across both Android and iOS platforms for an impressive third consecutive year.

“This evaluation includes secure over-the-air delivery of a Trusted Application into the Licel vTEE on iOS, which is vitally relevant for mobile payment and identity services,” stated Jose Ruiz, Cybersecurity BU Director at Applus+ Laboratories. This decisive evaluation further solidifies the necessity for continuously evolving security measures for apps long after their initial launch.

Licel's co-founder and CTO, Mikhail Dudarev, emphasized the significance of security post-launch, stating, “Payment and identity services keep evolving long after an app is released, and the security around them needs to evolve too.” The introduction of secure OTA delivery not only meets current needs but also sets the stage for future offerings.

Future Developments

As Licel continues to innovate, they plan on developing Trusted Applications tailored for specific use cases and industry sectors. This ambitious approach will allow service providers to implement sensitive capabilities as market demands evolve, thus improving the efficiency and adaptability of mobile applications in the face of rapid technological changes.

As of now, secure over-the-air delivery of Trusted Applications is available to all Licel vTEE customers across both major mobile operating systems. Licel is actively showcasing these developments at the PCI SSC Europe Community Meeting in Edinburgh, providing insights to interested stakeholders about integrating Trusted Applications into their payment and identity services.

About Licel

For over 15 years, Licel has been at the forefront of mobile channel protection, equipping enterprises across diverse sectors such as banking, payments, healthcare, and public services with robust solutions to shield applications and sensitive data from evolving cyber threats. This dedication to cybersecurity serves a crucial role in maintaining the integrity of mobile interactions and transactions in today’s digital age.

Conclusion

Licel's latest innovations signal a meaningful leap forward in securing mobile transaction environments, illustrating the company's commitment to enhancing digital security and user trust. As the digital landscape continues to change, so too will the strategies employed by organizations like Licel to ensure their users remain protected against emergent cybersecurity threats.