[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-383865-105":53,"doc-detail-383865-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","globalplatform-card-composition-model-security-guidelines-for-basic-applications-version-10-public-release","GlobalPlatform Card Composition Model - Security Guidelines for Basic Applications - Version 1.0 - Public Release","","GlobalPlatform Card Composition Model Security Guidelines for Basic Applications (Version 1.0, Public Release) provides a minimal set of security-focused guidelines for Basic Applications. It defines the overall composition model, distinguishing open platforms, Sensitive Applications requiring formal certification (e.g., Common Criteria or EMVCo), and Basic Applications not required to be certified. The document outlines mandatory and recommended development and operational practices, including resource sharing, versioning, interface sharing, bytecode verification, conversion and packaging, and other measures to help protect sensitive applications and maintain compliance.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/globalplatform-card-composition-model-security-guidelines-for-basic-applications-version-10-public-release/383865/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/globalplatform-card-composition-model-security-guidelines-for-basic-applications-version-10-public-release/383865.png","ImageObject",442,249,{"name":88,"@type":89},"McGucket","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-19","2026-09-24",true,{"@type":98,"interactionType":99,"userInteractionCount":79},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What is the GlobalPlatform Card Composition Model and how does it relate to composite products?","Question",{"text":108,"@type":109},"It defines a composition model for evaluating composite products composed of an open platform, one or more Sensitive Applications, and optionally Basic Applications. Sensitive Applications require formal security certification, while Basic Applications are not required to be certified.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"Which security responsibilities apply to Basic Applications in this document?",{"text":113,"@type":109},"The document proposes minimal guidelines for Basic Applications intended to protect Sensitive Applications and other applications. It includes both mandatory and recommended measures to support secure behavior.",{"name":115,"@type":106,"acceptedAnswer":116},"What are examples of mandatory and recommended guidance included under the development and packaging sections?",{"text":117,"@type":109},"Mandatory guidance includes AID assignment, shared resources, versioning, sharing the client interface, and bytecode verification tools and export files. Recommended guidance covers documented functionality, PIN usage, denial of service, exception handling, and user input.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},383865,1791736984,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":79,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":35,"language":135,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":136,"faqs":137,"seo_title":138,"seo_description":61,"update_tm":139,"read_time":140},1236954412713,"https://us-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0","®  \nGlobalPlatform Card Composition Model  \nSecurity Guidelines for Basic Applications  \nVersion 1.0  \nPublic Release  \nJune 2012  \nDocument Reference: GPC_GUI_050  \nCopyright 􀂔 2012 GlobalPlatform Inc. All Rights Reserved.  \nRecipients of this document are invited to submit, with their comments, notification of any relevant patent rights or other intellectual property rights of which they may be aware which might be necessarily infringed by the implementation of the specification or other work product set forth in this document, and to provide supporting documentation. The technology provided or described herein is subject to updates, revisions, and extensions by GlobalPlaorm. Use of this information is governed by the GlobalPlatform license agreement and any use inconsistent with that agreement is strictly prohibited. GlobalPlatform is a Trademark of GlobalPlatform, Inc.  \nThis page intentionally left blank.  \nContents  \n1 Introduction ............................................................................................................................ 5  \n1.1 Audience ...............................................................................................................................................5  \n1.2 IPR Disclaimer.......................................................................................................................................5  \n1.3 References ............................................................................................................................................6  \n1.4 Terminology and Definitions ..................................................................................................................8  \n1.5 Abbreviations and Notations ............................................................................................................... 11  \n1.6 Revision History .................................................................................................................................. 11  \n2 Scope and Considerations .................................................................................................. 12  \n2.1 Scope .................................................................................................................................................. 12  \n2.1.1 Exclusions .................................................................................................................................... 12  \n2.2 Considerations .................................................................................................................................... 12  \n3 Guidelines ............................................................................................................................. 13  \n3.1 Development ....................................................................................................................................... 14  \n3.1.1 Mandatory: AID Assignment ....................................................................................................... 14  \n3.1.2 Mandatory: Shared Resources ................................................................................................... 14  \n3.1.3 Mandatory: Versioning ................................................................................................................ 14  \n3.1.4 Mandatory: Sharing Client Interface ........................................................................................... 14  \n3.1.5 Recommended: Documented Functionality Only........................................................................15  \n3.1.6 Recommended: PIN Usage ........................................................................................................ 15  \n3.1.7 Recommended: Denial Of Service .............................................................................................. 15  \n3.1.8 Recommended: Exception Handling..............................................................................","cbCaiqPQ7ACwbneE","https://ap.wps.com/l/cbCaiqPQ7ACwbneE","pdf",405435,"English","# Introduction\n## Audience\n## IPR Disclaimer\n## References\n## Terminology and Definitions\n## Abbreviations and Notations\n## Revision History\n# Scope and Considerations\n## Scope\n## Exclusions\n## Considerations\n# Guidelines\n## Development\n## Conversion and Packaging","[{\"question\":\"What is the GlobalPlatform Card Composition Model and how does it relate to composite products?\",\"answer\":\"It defines a composition model for evaluating composite products composed of an open platform, one or more Sensitive Applications, and optionally Basic Applications. Sensitive Applications require formal security certification, while Basic Applications are not required to be certified.\"},{\"question\":\"Which security responsibilities apply to Basic Applications in this document?\",\"answer\":\"The document proposes minimal guidelines for Basic Applications intended to protect Sensitive Applications and other applications. It includes both mandatory and recommended measures to support secure behavior.\"},{\"question\":\"What are examples of mandatory and recommended guidance included under the development and packaging sections?\",\"answer\":\"Mandatory guidance includes AID assignment, shared resources, versioning, sharing the client interface, and bytecode verification tools and export files. Recommended guidance covers documented functionality, PIN usage, denial of service, exception handling, and user input.\"}]","GlobalPlatform Card Composition Model - Security Guidelines for Basic Applications - Version 1.0 - Public Release | PDF",1790259967,6]