Java Card Applet Development for Secure Identification
This is full-cycle JavaCard applet development across secure elements. Where the target is a SIM or eUICC specifically, see eUICC applet development and Java Card for SIM/eSIM.
AmbiSecure, the security business unit of Ambimat Electronics, develops Java Card applets for secure identification — the on-card software that turns a secure element into a credential a system can trust. We work with product teams, system integrators and credential issuers who need an applet written to their own specification, on their own chip, under their own keys: identity and access credentials, PIV, FIDO2 authenticators, eID, OpenPGP and bespoke closed-loop applications. The engagement runs the full cycle of custom JavaCard / JCOP development — from requirements analysis to a signed CAP file with source, QA, functional specification documentation and post-implementation support.
We have already shipped the applets you are about to spec.
Full development cycle
Requirements analysis, functional specifications alignment, solution design, applet development with testing GUI, QA testing, functional specification documentation, post-implementation support.
Standards we know
JavaCard 3.0, GlobalPlatform 2.3, JCOP 3.1; NIST SP 800-73-3 PIV (parts 1-4); GSM standards; FIDO U2F, FIDO2 CTAP, W3C WebAuthn; ISO/IEC 7816 and industry-specific standards.
Toolchain coverage
We work in Eclipse with JCOP Tools, the JavaCardOS Development Kit, and the Oracle Java Card Development Kit — whichever your chip vendor prefers.
Cryptography portfolio
RSA, ECC, AES, DES/3DES, SHA-2, HMAC, ECDSA. Secure Channels / Messaging. Multi-factor implementations. Applet countermeasures against fault and side-channel attacks.
Use case range
Loyalty, ID and club cards, PIV, FIDO Web Authentication applets, payment, OpenPGP, eID. Bespoke applets for closed-loop ticketing and secure messaging.
Delivery quality
Compiled CAP file plus source. Unit tests. Integration test GUI. Functional spec doc. Issue triage during integration. The applet that ships, not the demo that compiles.
How a JavaCard project actually runs.
From your spec to a CAP file your factory can load, with the documentation auditors expect.
Discover
Spec, target chip, certification target, host integration.
Design
Functional specification, AID layout, security model, APDU command set.
Develop
Applet code, testing GUI, unit tests, IDE-of-your-choice.
Validate
QA testing, functional specification documentation, security review.
Support
Integration support, post-implementation patches, certification dossiers.
The line items in a JavaCard engagement.
| Source code | Java source for the applet, tests, and supporting classes; CAP file build scripts |
|---|---|
| CAP file | Signed CAP file ready for SCP03 load by your personalisation line or by our Multi-Card Applet Loading Tool |
| Functional specification | APDU command set, AID layout, key derivation model, lifecycle states |
| Test suite | Unit tests inside the JCVM simulator; integration tests against a real chip |
| Test GUI | Operator-friendly tool to walk the applet through its functional flows |
| Documentation | Architectural overview, security model, integration notes, certification-friendly evidence |
The applet families we ship.
| FIDO | FIDO2 applet — U2F + CTAP2.1, resident credentials, on-card PIN. Powers the OnePass Card. |
|---|---|
| PIV | PIV applet — NIST SP 800-73 interface for legacy government and enterprise PKI integrations. |
| OpenPGP | OpenPGP card applet — RFC 4880 / OpenPGP card spec. Signing, decryption and authentication keys. |
| EMV | Payment applets — VISA / Mastercard / Discover / RuPay applet personalisation flows. |
| eID | National eID applets — eIDAS-qualified credential issuance under customer roots. |
| Custom | Bespoke applets — closed-loop ticketing, secure messaging, application-specific protocols, designed to your spec. |
Targeting a SIM or eUICC rather than a general secure element? The eSIM-specific applet work is covered on the eSIM property: eUICC applet development.
Where this fits in the bigger picture.
Product: JavaCard Applet Platform
The applets we have already shipped, ready to start from.
Service: Tool-Chain Development
The personalisation tooling that surrounds applet delivery.
JavaCard applet development for enterprise identity
AID design, lifecycle, secure messaging, personalisation, and the mistakes to avoid.
Have a JavaCard applet to write?
Tell us your chip, your spec, and your certification target. We will scope the engagement and tell you what is reasonable.