News
FIME Launches Online NFC CAP File Security Analysis Service
November 2015 by Marc Jacob
FIME launches TrustApp, a secure online testing portal for near field communication (NFC) applications embedded in secure elements. Mobile network operators (MNO) and NFC service providers can now validate the security of their sensitive and basic NFC applications, quicker and more cost effectively.
The primary function of the portal is CAP File analysis. Due to the sensitivity of testing the CAP File – an NFC application’s bytecode which contains intellectual property – the file is automatically encrypted on the client’s machine before it is uploaded to the testing platform and stored on a secure server. Testing this file confirms that the NFC application conforms to the relevant industry security standards. The portal also gives users immediate and convenient access to fully automated end-to-end application testing and report generation, as well as report download.
FIME has developed this service in collaboration with the Celtique team at Inria, a research team dedicated to improving the security and reliability of smart card and secure device software. It includes analysis for alignment with key security rules from a number of international industry authorities and platform manufacturers. Additional bespoke security rules can also be developed and added to the tool.
Once the basic or sensitive application has been verified by the online portal, the final stage is local laboratory validation by FIME’s experts. Applications are subjected to additional CAP File analysis, source code review and testing for compliance to the key security rules. Sensitive applications are also security tested against relevant industry application requirements.
