Secure Elements / Embedded Security

Software engineering for secure embedded systems.

ConSec provides embedded-security engineering across hardware security modules (HSMs), secure elements (SEs), trusted execution environments (TEEs) and trusted platform modules (TPMs), with a particular focus on secure element systems and Java Card applets. We develop host software, middleware and tools, combining GlobalPlatform expertise, HSM integration and testing to support your project from implementation through system integration.

Discuss your project →

Explore our expertise →

CONNECTED SECURITY
OTASigned updates · Verification on device
Device security building blocks
SESecure ElementJava Card
TEETrusted Execution EnvironmentIsolated execution
TPMTrusted Platform ModulePlatform trust
Provisioning · Authentication · APIs
HSMKey infrastructure · On-premise & cloud
Next horizon: PQCCrypto-agility → hybrid approaches → migration
From device to key infrastructure: illustrative relationships. Components and interfaces depend on the target platform.

Expertise across the system

ConSec’s expertise spans Java Card platforms, application development and the interfaces to host software and key infrastructure. This technical breadth supports work on individual components and their interaction within the system.

Secure Elements & Java Card

ConSec brings expertise in Java Card operating systems and applet design, development, integration and testing. Applet scope includes CCC Digital Key, Aliro, IoT SAFE, FIDO/FIDO2, PIV and payment applications, alongside proprietary applications and project-specific specifications.

Java Card OS · CCC Digital Key · Aliro · IoT SAFE

Explore secure-element expertise →

GlobalPlatform & Secure Provisioning

Reliable card management, provisioning and personalization start with well-defined workflows. ConSec provides the GlobalPlatform software, scripts and tools to put them into practice. Scope includes security domains, card lifecycles, secure channels and applet loading and installation, with reproducible workflows and automated tests.

GlobalPlatform · Secure channels · APDU tooling

Explore provisioning expertise →

HSMs & Key Management

Our HSM expertise covers host software, customer-specific firmware applications and extensions, and cryptographic interfaces — from implementation to testing. Our integration experience spans industry-standard cryptographic APIs and REST APIs, connecting on-premise and cloud HSMs with applications, production and personalization workflows.

On-premise HSMs · Cloud HSMs · Cryptographic APIs

Explore HSM expertise →

Middleware, Drivers & Test Automation

Drivers, middleware and diagnostic tools connect secure elements with host applications and make their interactions visible. We build APDU/TLV parsers and automated tests to inspect application behavior, reproduce errors and verify integration across card and host software.

PC/SC · Middleware · Test suites

Explore middleware expertise →

Embedded Security & System Architecture

Secure connected devices need a coherent architecture, from security concepts to embedded software. ConSec supports this work across connected and Internet of Things (IoT) systems. We consider Secure Elements (SE), Trusted Execution Environments (TEE) and Trusted Platform Modules (TPM) according to platform and security requirements, alongside authentication, secure updates and NFC/Bluetooth Low Energy (BLE) integration.

NFC · BLE · System integration

Explore embedded-security expertise →

PQC Transition & Crypto-Agility

Assessment, migration concepts and integration support for the transition to post-quantum cryptography, with attention to constrained devices, secure elements and HSM environments.

Explore PQC transition support →

Application areas

Explore how ConSec develops and integrates software for secure elements, HSMs and the systems around them.

Digital Key & Access

Capability examples

CCC Digital Key: Security concepts, Java Card applet development, testing and integration for vehicle access and start authorization.

Aliro: Security concepts, Java Card applet development, testing and integration for digital access systems and smart door locks.

CCC Digital Key · Aliro · Java Card

Explore Digital Key and access applications →

HSM Applications & Integration

Capability example

Host software and cryptographic API integration for on-premise and cloud HSMs, alongside customer-specific HSM firmware applications and extensions. Experience includes Utimaco, Thales Luna, AWS CloudHSM and Google Cloud HSM.

On-premise · Cloud · Host software

Explore HSM integration →

Identity & Authentication

Capability example

Identity and authentication using secure elements in smart cards, tokens and smart devices. ConSec connects FIDO, PIV and PKI applets with middleware and host applications, from development through integration testing.

Secure Element · FIDO · PKI

Explore identity and authentication →

From requirements to working components.

ConSec supports your project with architecture and technical consulting, software development, integration and testing. The scope and deliverables are defined around your requirements.

Iterative engineering process
01Requirements02Architecture03Development04Integration05TestingWorkingcomponents
Review, learn, refine — results feed into the next iteration.

Architecture & Technical Consulting

Define requirements, assess technical options and establish an approach that accounts for platform constraints and the surrounding system.

Specifications · Security concepts · Technical reviews

View architecture services →

Software & Tooling Development

Develop applications, interfaces and tools to your requirements, including Java Card applets, embedded and host software, customer-specific HSM firmware extensions and provisioning tools.

Applications · Firmware extensions · Scripts and tools

View development services →

Integration & Secure Provisioning

Connect device communication, card-management workflows, middleware and key infrastructure, including NFC/BLE interfaces and production or personalization environments.

Communication interfaces · Middleware integration · Provisioning flows

View integration services →

Testing, Review & Knowledge Transfer

Develop automated tests, review implementation behavior against agreed requirements and support your team with documentation and practical knowledge transfer.

Test suites · Documentation · Knowledge transfer

View testing and knowledge-transfer services →

How we work

  1. Assessment — Understand the target platform, current implementation and technical gaps before defining the contribution.
  2. Specification — Agree requirements, interfaces and the behavior to be implemented and checked.
  3. Implementation — Develop the required components, prototype flows and tooling within the agreed scope.
  4. Integration & Validation — Connect the components and test their behavior in the relevant system context.
  5. Support & Training — Maintain and support your solution, and build your team’s practical skills through focused sessions on the platform, tools and development workflows, tailored to your project.

See how we work →

What are you building?

Tell us about your platform, technical challenge and the support you need. A short description is enough to start the discussion.

Discuss your project →

Or email info@consec-it.com.