#London #UK #EMVCo #Mobile Security #Licel vTEE

Licel vTEE Renews EMVCo SBMP TEE Approval

In a significant achievement for mobile security, Licel has announced that its vTEE (Virtual Trusted Execution Environment) has received renewed approval from EMVCo, marking the second consecutive year of its successful evaluation across both Android and iOS platforms. This independent validation underscores the Licel vTEE's critical role as a secure execution environment, making it essential for organizations focusing on delivering secure mobile applications such as wallets, SoftPOS, mobile banking, and digital identity services.

The vTEE functions as a software-based secure element integrated within mobile applications, creating an isolated environment conducive for Trusted Applications and confidential operations. This approach eliminates the need for dedicated hardware secure elements while providing a robust layer of security. Licel's comprehensive portfolio, which includes DexProtector for application hardening and real-time threat assessments through Alice Threat Intelligence, complements the vTEE's capabilities, ensuring multi-layered security in today’s rapidly evolving mobile landscape.

The latest evaluation was carried out by Applus+ Laboratories, a leading lab renowned for its expertise in cybersecurity. Jose Ruiz, Cybersecurity BU Director at Applus+, hailed the approval as a remarkable feat, especially noting the three-year streak of EMVCo SBMP TEE approval for the Android platform. He expressed confidence in Licel's capabilities, emphasizing the importance of independent validation in building digital trust.

The significance of cross-platform approval cannot be overstated. Traditionally, developers of payment wallets and other high-security applications had to maintain different security stacks for various platforms like Android and iOS. However, with the Licel vTEE, developers can now implement their most sensitive code just once, facilitating a seamless deployment process across major mobile operating systems.

This renewed approval aligns with the European Union's current move toward formalizing cybersecurity expectations for digital identity wallets. ENISA's draft candidate scheme, under public review, sets stringent requirements for the isolation of sensitive cryptographic operations, indirectly supporting the utility of solutions like the Licel vTEE that have undergone rigorous evaluations. As the regulatory landscape evolves, wallets that incorporate independently validated solutions will undoubtedly gain a competitive edge.

Ivan Kinash, Licel’s co-founder and CEO, remarked that mobile devices have become crucial in storing trust for users. He pointed out that individuals utilize these devices to perform transactions, identify themselves, and access essential services, all areas where effective security is vital. While hardware roots of trust remain an integral part of security strategies, they can no longer serve as the sole solution in a fragmented mobile ecosystem.

Licel has maintained a layered and adaptive security approach for the past 15 years, and this renewed approval serves as a testament to the Licel vTEE's maturity and efficacy as a key component in the mobile protection framework. The EMVCo SBMP TEE approval pathway is notably stringent, as it not only evaluates the software protection surrounding applications but also assesses the secure execution environments employed for handling sensitive operations.

For financial innovators including banks, wallet providers, SoftPOS vendors, and digital identity teams, this certification signifies that the Licel vTEE is a trusted component for developing secure mobile solutions that comply with industry standards. The issuance of EMVCo certificates indicates that the products have been evaluated according to the rigorous EMV Security Guidelines for TEE-based mobile payments.

In summary, Licel’s continuous improvements reflect its commitment to providing robust security solutions amid ever-evolving cyber threats. By effectively addressing the challenges associated with mobile applications, Licel empowers organizations to safeguard users' digital experiences without compromising on performance or security.