About Global Platform Implmentation
hi,
I am looking for information regarding GP compliance for application management. I have came to know that according to GP, application provider will give you a various profiles (e.g. load,install, personalization) and script interpreter will process this scripts to generate APDUs.
I want to do the same finding no proper examples and links. I do have scripts example but it seems that GP just provides interfaces, I can see the api doc of GP but nowhere I have found implementation of classes. Other third party like card contact (http://www.openscdp.org/scsh3/download.html) has provided implementation of these (GP) classes but it has some custom flows and also it is means for plastic card (where reader is attached and running these scripts will install application on cards)
Also it seems that this process only applicable when we want to install application in bulk on plastic cards, but what about mobile phones when we want to deliver application OTA? Do you think even for mobile world this system (application management) of GP will work.
Any feedback on this is welcome.
[1117 byte] By [
j2miana] at [2007-11-26 19:47:59]
# 1
I did not see any specification for management application data OTA. It sounds to me kinda like JSR257. GP evolved from Visa, so maybe you should contact Visa International how they certify NFC like devices.
As far as general personalization goes, I do not understand the problem. Do you want a standardized flow for applet management? The GP2.1.1 card specification lists all the necessary commands to do so.
# 2
You are right there is no spec for OTA.
My question is:
I want to create framework to deliver applets OTA for that I have to create APDUs per GP2.1.1. I can do that using my custom code.
Now confusion is people are saying that according to GP you will get application profiles and you have to run their standard script to generate apdus. Now looking at that it seems this process is for plastic cards to install applets directly by running scripts. So how can I incorporat this profile and scripting stuffs in my framework to be GP compliant. Because it may be possible that some application provider will give me only application profile to deliver application-->and I have to process that profile to generate apdus.....Its really confusing...
