Secure element integration — the chip in the product.
A secure element is the trust anchor. Picking the right one, integrating it into a product, and operating it through the product's lifecycle are three different problems. AmbiSecure handles all three — from chip selection through firmware, applet, personalisation, and field rotation.
Why an SE
A secure element is a tamper-resistant chip that holds keys and runs cryptographic operations without ever exposing the keys to the host. The chip's physical packaging, side-channel countermeasures, and on-die verifier resist attacks that would trivially break software-only crypto.
Use cases where an SE is the right choice:
- FIDO2 / WebAuthn authenticators (smart card, USB key, embedded SE in phone).
- Payment terminals (EMV chip-and-PIN, EMV contactless).
- Connected vehicles (V2X HSMs, automotive cybersecurity).
- Industrial IoT root-of-trust.
- eSIM / iUICC for cellular authentication.
- Document signing terminals (eIDAS qualified signatures).
Integration scope
Chip selection
Match SE family to security tier (CC EAL5+ vs EAL4+), interface (ISO 7816, ISO 14443, SPI, I2C), throughput, certifications.
Host driver
Driver on the host MCU / SoC for talking to the SE. APDU framing, secure channel (SCP03), session management.
SE-side applet
JavaCard applet running on the SE. Custom or off-the-shelf (FIDO, PIV, OpenPGP). Designed for the product's threat model.
Field operations
Issuance, key rotation, applet update under SCP03. Telemetry for tamper detection.
SE families we ship
NXP SmartMX
JavaCard 3.x, GlobalPlatform 2.3.1, CC EAL6+ on flagship variants. Used in OnePass Card.
Infineon SLE / SLJ
JavaCard, CC EAL5+ / EAL6+. Strong eID / payments deployment history.
ST33 family
CC EAL5+ secure microcontrollers. Embedded SE common in IoT root-of-trust.
Vendor-agnostic integration
For customers wanting to dual-source. We handle abstraction at the host-driver layer.
Embedding a secure element in your product?
We have shipped silicon-to-cloud integrations across smart cards, USB authenticators, payment terminals, IoT gateways, and connected vehicles. Tell us your platform and constraints.