Chip-based solutions are still the benchmark technology for payment systems. Whether in a Smart Card or embedded in a mobile handset, secure elements offer a consistent security solution with a well-defined certification scheme that includes security evaluations against malicious operations and assessment of SE compliance with functional and interoperability specifications. One of the major challenges for smart card and SE manufacturers is achieving certification in the shortest time possible.

Payment Solutions Evaluations

Applus+ is a security laboratory accredited to conduct security evaluations on smartcards and secure elements under EMVCo and main payment schemes (Visa, MasterCard, Amex, Discover & JCB) for IC, Platforms and Payment Applications.
We are also a functional laboratory recognized by EMVCo, Visa, Discover and Amex, offering a one-stop-shop evaluation service for these payment schemes. Applus+ is also a GlobalPlatform full member and qualified laboratory, and can conduct the necessary GP tests for contact and contactless cards compliance.
We are also a functional laboratory recognized by EMVCo, Visa, Discover and Amex, offering a one-stop-shop evaluation service for these payment schemes. Applus+ is also a GlobalPlatform full member and qualified laboratory, and can conduct the necessary GP tests for contact and contactless cards compliance.
 

IC and Platform Evaluations

IC and Platforms are multipurpose products and their vendors must consider both EMVCo and Common Criteria certifications. Applus+ is accredited to conduct security evaluations for both certification schemes, and provides combined evaluation process to reduce certification times and costs.

eID, eHealth, Telecom & Transport App Evaluations

Applus+ is a security laboratory accredited to conduct Common Criteria evaluations on IC, Platforms and Applications for all kinds of smartcards and similar products following a defined protection profile or claiming a specific security target. We are also accredited to conduct security evaluations on Mifare-compliant products, a certification scheme used in a wide range of applications like transport, ticketing and loyalty.

eSIM Applications Evaluation

GSMA is promoting the use of Embedded Secure Elements (or embedded UICC) as an alternative to traditional SIM cards to manage connectivity services on mobile and IoT devices. Their main benefit is that they are prepared to manage multiple MNO via remote provisioning. As part of the GSMA certification process, GSMA developed a Common Criteria Protection Profile to evaluate eSIM applications security. eSIM applications must run on a Platform and an IC that has been previously certified under specific Common Criteria Protection Profiles.

Applus+ is accredited to perform Common Criteria evaluations for IC, Platforms and eSIM Applications. Additionally, Applus+ is also qualified to test GlobalPlatform eUICC specifications, a test program developed by GSMA and managed by GlobalPlatform to ensure that eSIM platforms comply with a global standard for remote provisioning and multiple Mobile Network Operators management.

Note: Because Applus+ Laboratories is accredited as a third party laboratory by several evaluation and certification schemes, and in order to guarantee its impartiality,  Applus+ engineers are never involved in actual product development or solutions implementation.

 

IC & Platforms

Payment Applications

Other Applications

Security Evaluations

  • EMVCo (IC Security)
  • EMVCo (Platform Security)
  • Common Criteria (Security IC Platform Protection Profile)
  • Common Criteria (Java Card Protection Profile)

Functional Evaluations

  • EMV L1 (Contact & Contactless)
  • GlobalPlatform

Security Evaluations

  • EMVCo (CPA)
  • Visa (VCSP)
  • MasterCard (CAST)
  • AMEX (AEIPS & Expresspay)
  • Discover (D-PAS & Zip)
  • JCB (J/Smart & J/Speedy)

Functional Evaluations

  • EMVCo (CPA/CCD)
  • Visa (VSDC, VCPS, Prepaid, VMPA)
  • Discover (D-PAS, Cross Testing)
  • AMEX (AEIPS & Expresspay)

Common Criteria & SOG-IS

  • ePassport
  • Signature Creation Devices
  • eHealth Cards
  • Transport Cards
  • uSIM

Fido

  • Authentication

Mifare

  • Transport Cards
  • Ticketing