Post-Distribution Provisioning and Personalization of a Payment Application on a UICC-Based Secure Element

The Near Field Communication technology is currently leveraged by large standardization efforts and attempts at ¿nding suitable ecosystem and business models. In this context, the GlobalPlatform consortium released requirements to allow multiple actors to manage card content con¿dentially; and to adapt the platform to the Universal Integrated Circuit Card (UICC) in what is referred to as Mobile Pro¿le. These speci¿cations need to be experimented, tested and validated. This is what the project VACAMS (Validation of Content Application Systems) aims to achieve. The project stakeholders (Oberthur Card Systems, Trusted Labs and GREYC) will bring their respective expertise in smart cards engineering, testing methodology and secure electronic transactions. The experimentation will consist in developping a UICC Secure Element complying with the GlobalPlatform speci¿cations and pro¿le, and in loading and personalizing "over the air" a payment application after the issuance of the mobile device. It will take place on an experimental electronic payment platform at ENSICAEN.