GSMA announces first eSIM security certification

The GSMA has announced the first certification of its eUICC Security Assurance scheme (eSA) for M2M, awarded to STMicroelectronics, a global semiconductor leader serving customers across the spectrum of electronics applications. STMicroelectronics selected GSMA Licensed Test Laboratory, SGS Brightsight, for the testing and certification process – which was ratified by GSMA’s appointed Certification Body, TrustCB.

GSMA eSA ensures that new eSIM products are resilient against a range of high-level attack threats. The scheme is designed to expedite the eUICC security certification process, overcome complexities, and reduce time to market for eSIM products. The certification for STMicroelectronics’ M2M product ST4SIM-201v1.0.8 was completed quickly and efficiently, and in significantly less time than the industry average for similar security schemes.

The scheme requires manufacturers to prove a benchmark level of security resilience across product processes. It does this by combining high-security quality with a pragmatic evaluation implementation approach adapted for the mobile market. The processes are in line with industry and ISO requirements and reflect the highest Common Criteria security standards recognised in Europe.

“The GSMA is committed to promoting security across the entire mobile ecosystem to ensure the benefits of mobile connectivity can be enjoyed safely by all. In addition to guaranteeing the highest security – eSA ensures that eSIM products have the same level of security resilience required for chips embedded in passports – we are delighted that our processes enable faster time to market for manufacturers,” said the GSMA’s Chief Technology Officer, Alex Sinclair.

“This is a critical milestone for STMicroelectronics, and we thank the GSMA for maintaining the highest security levels for the product and their efforts to support reduced time-to-market with quick and efficient eSIM certification,” commented Laurent Degauque, Marketing Director at STMicroelectronics.

“SGS Brightsight is pleased to implement the GSMA assurance framework to maintain high security quality using a pragmatic and efficient evaluation approach. The programme ensures we focus on the topics that are fundamental to promoting a ‘security-first’ culture across the entire telecommunication and network industry,” said Adjay Gopie, Director Business Development at SGS Brightsight.

“TrustCB is delighted to issue this first eSA certification. From the very start, the eSA scheme has proved its ability to provide a high-assurance certification in a predictably short timeframe alongside experienced labs. Congratulations to ST for their certified ST4SIM-201v1.0.8 and thanks to SGS Brightsight,” commented Wouter Siegers, CEO at TrustCB.

CT Bureau