Applus+ Laboratories Evaluates Goodix’s eSIM Solution

Integrated Security Evaluation of Goodix’s eSIM Solution

Goodix’s eSIM (embedded SIM) solution is built on a layered security architecture composed of three elements:

• A Common Criteria–certified integrated circuit (IC) providing the underlying secure hardware platform (certified independently under CC).
• A Common Criteria–certified Card Operating System (COS), evaluated by Applus+ Laboratories, providing the secure execution environment.
• An eUICC implementation, running in parallel with on top of the COS, enabling secure mobile and IoT connectivity.

Applus+ Laboratories evaluated the software layers—the COS and the eUICC—within their respective certification schemes, ensuring strong and consistent assurance across the secure connectivity stack.

High-level Authoritative Certification of the COS

Applus+ Laboratories conducted a comprehensive evaluation of Goodix’s Card Operating System (COS) under Common Criteria v3.1 Release 5 and the Common Evaluation Methodology (CEM). The COS achieved EAL5+, including the advanced assurance components ALC_DVS.2 and AVA_VAN.5.

This certification validates the robustness of the COS design and its resilience against sophisticated physical and logical attacks. It also confirms that the COS provides a high assurance execution environment suited to secure services across mobile, identity, payment, and IoT applications.

GSMA eUICC Security Assurance (eSA) Certification of the eSIM

Building on the secure foundation provided by the certified IC, Goodix’s eSIM solution was evaluated by Applus+ Laboratories under the GSMA eUICC Security Assurance (eSA) scheme. This evaluation focused on the security and compliance of the eUICC implementation operating with the CC certified COS.

The eSIM successfully fulfilled the security requirements defined for consumer and IoT eUICC products, demonstrating Goodix’s commitment to delivering reliable and secure connectivity solutions.

A Unified, Security by Design Architecture

Together, the Common Criteria EAL5+ certification of the COS and the GSMA eSA certification of the eSIM implementation highlight a cohesive and robust security architecture. The COS and eUICC operate as an integrated platform, showing the strength of Goodix’s security by design approach to mobile and IoT connectivity.

Enabling Trust and Market Access

Applus+ Laboratories supports semiconductor and device manufacturers along their security certification roadmap, helping them identify and obtain the most appropriate certifications for each product line and target market. As a globally recognized leader in cybersecurity evaluations, Applus+ Laboratories brings extensive accreditation coverage, deep technical expertise, and a long track record in high assurance certification schemes.

By combining methodological rigor with internationally recognized evaluation capabilities, Applus+ Laboratories enables clients—such as Goodix—to strengthen trust in product security, accelerate access to global markets, and meet the rising security expectations of industry partners, regulators, and end users.

The collaboration between Goodix and Applus+ Laboratories continues to grow, driven by a shared focus on secure innovation and excellence in security evaluation.