【Technical Scope】

•  System Integration
  - Architecture design of mutual authentication and encrypted communication among Service Provider (SP) servers, MNO/vendor Secure Element Issuers (SEIs), and mobile devices

  - Design and implementation of mechanisms for the lifecycle management of keys and certificates, role-based access control (RBAC), and audit logging

• System Operation Support
  - Architecture design of systems for inter-server coordination and back-office operations and monitoring, including dashboards, alerts, and reporting

  - Implementation of redundant system processing and key rotation management to achieve high system stability and reliability

• Device-Side Implementation
  - Implementation of Secure Element access control, secure channel establishment, and lifecycle management commands

  - Support covering assessment of compliance with Open Mobile API (OMAPI) requirements, definition of implementation policies, development, and verification