London, October 21st / PRNewswire / -- Payment service providers, issuers, and digital identity teams can now securely deliver new trusted applications to existing iOS applications installed on users' devices. Licel has extended its Licel vTEE to support the delivery of trusted applications over secure over-the-air transmission ( OTA ) on iOS, allowing sensitive payment, identity, and encryption functions to be deployed and updated at the provider's own schedule without the need to update the host application. This capability has been tested in evaluations by Applus + Laboratories, and these evaluations have led to the approval of this Licel vTEE update on iOS.

Each delivery incorporates three security mechanisms. Trusted applications are transmitted to the device through a secure channel protocol based on SCP11a, which is in turn based on GlobalPlatform. Only software packages authorized by the application provider can be installed, thus allowing the provider to have full control over the content running within those applications. After delivery, each trusted application operates independently within a Licel vTEE environment, which is embedded within a host application protected by DexProtector and anchored in the device's hardware-backed key store.

This approach is not unfamiliar to payment and telecommunications teams. According to the GlobalPlatform specification, performing over-the-air configuration of mini-programs for SIM cards and security components has been a standard practice for many years. Licel introduces this mature method into mobile applications, helping issuers and wallet providers adopt a configuration process that they are already familiar with and trust.

Trusted applications can use the open-source Java Card emulator JCardSim of Licel for development and testing. Developed with JCardSim, it is deployed via air transportation and runs securely with the help of Licel and vTEE.

This iOS assessment has enabled Licel and vTEE to obtain updated approval under the SBMP TEE category of EMVCo, and to maintain their valid approval for the third consecutive year on both Android and iOS platforms. Licel conducts an assessment of vTEE twice a year, once on each platform, so as to ensure that their approval status remains up-to-date as the two operating systems continue to evolve.

Applus + Laboratories Director of Cybersecurity Business Jose Ruiz stated: "This assessment includes delivering a trusted application to Licel within vTEE on iOS via secure over-the-air transmission. This capability is significantly relevant to mobile payments and identity services. This is the latest result of our ongoing assessments of Licel and vTEE on these two major platforms."

Licel, co-founder and Chief Technology Officer, Mikhail Dudarev, stated: "Payment and identity services will continue to evolve after the application is released, and so will the security surrounding them. Secure over-the-air transmission means that our customers can deploy new trusted applications to users' already installed applications, using configuration models that the payment and telecommunications industries have relied on for many years. Next, we will launch trusted applications designed for specific use cases and industries, so that providers can add sensitivity capabilities when needed."

Currently, Licel and vTEE customers can already use the secure over-the-air transmission feature of trusted applications on Android and iOS.

Licel is participating in the PCI SSC Europe Community Meeting event (October 20th to 22nd) being held in Edinburgh. Attendees can communicate with the Licel team to learn about trusted applications suitable for their own payment and identity services. The booth number is 29.

Licel is a global mobile channel protection company that helps organizations safeguard applications, SDK, and sensitive mobile services against rapidly evolving cyber threats. For over 15 years, Licel has been collaborating with organizations in the banking, payments, healthcare, telecommunications, public sector, and other high-security industries to protect mobile interactions and transactions.

Applus + Laboratories is a department under the global leader in testing, inspection, and certification, Applus. Its IT laboratory specializes in providing security and functional assessments for IT products and security technologies.

Media contact: Tom Cross, Licel Content and Communications Supervisor, +442032894888 / [ email protected ]