Gemalto


Gemalto is an international digital security company providing software applications, secure personal devices such as smart cards and tokens, and managed services. It is the world's largest manufacturer of SIM cards.
The company was founded in June 2006 when two companies, Axalto and Gemplus International, merged. Gemalto's 2015 revenue was €3.122 billion.
Gemalto N.V. is a public company incorporated in the Netherlands. It is headquartered in Amsterdam, and has subsidiaries and group companies in several countries. Globally, Gemalto has 15,000 employees, 118 offices; 17 production sites, 45 personalization centers, and 27 R&D centers in 49 countries.
In April 2019, Gemalto became a division of the French Thales Group.

History

In June 2006, smart card providers Gemplus and Axalto merged to become Gemalto Axalto was a Schlumberger IPO spin-off in 2004. Between the merger and 2015, Gemalto completed a series of acquisitions: the Leigh Mardon's personalization center, Multos International, NamITech in South Africa, NXP mobile services business, the mobile software solution provider O3SIS, Trusted Logic, Serverside, XIRING's banking activity, Netsize, Valimo Wireless, a provider in mobile authentication, the internet banking security specialist Todos AB in Sweden, Cinterion the German specialist of machine-to-machine, SensorLogic, Plastkart in Turkey, Ericsson’s mobile payment platform IPX, the information security company SafeNet and Buzzinbees, the automatic SIM activation expert.

Axalto and Schlumberger

began its chip card activities in February 1979 when it licensed and marketed certain chip card technologies developed and patented by Roland Moreno, who is generally credited with the invention of the chip card.
Schlumberger developed the first telephone chip cards for France Telecom and the Swedish telecommunications operator Telia in the early 1980s. The company developed ties with telecommunications operators in several countries, and played a role in industry-wide efforts to develop new digital mobile communication standards, particularly the GSM transmission standard. Schlumberger designed its first SIM card in the early 1990s for the launch of GSM in Europe, and this led to the use of microprocessor card technology as an access and security solution for mobile telephony worldwide, in 3 billion handsets today.
In the early 1980s, the French banking sector decided to migrate from the magnetic stripe card-based payment system to a more modern and secure microprocessor card-based system. Schlumberger received its first contract in June 1981 to provide GIE Cartes Bancaires, the French credit/debit card issuers’ association, with 5,000 microprocessor cards and 200 associated POS terminals. The microprocessor card-based payment system subsequently became standard in France and eventually led to a global standard known as EMV, set up by Europay, MasterCard and Visa.
Schlumberger experienced internal and external growth since the launch of its chip card operations in the early 1980s through the 1990s and 2000s, both in terms of revenue and product portfolio, particularly with the substantial growth in GSM-based mobile telecommunications. Acquisitions of regional companies in card production and personalization included Cowells, Malco, Printer and Cardtech, followed by Solaic in 1996 and Bull-CP8 from Bull in 2001, in France and China.
In 2003, Schlumberger created Axalto as a division to consolidate into one company all of its card and POS terminal activities, which until then had been managed by several subsidiaries and joint ventures of the Schlumberger group. Subsequently, Axalto was listed on the Euronext Paris market on May 18, 2004.

Gemplus

Founded by :fr:Marc Lassus|Marc Lassus, Gemplus started its operations in 1988 as a supplier of prepaid phonecards. Because of its presence in the market of the prepaid phonecards during the 1990s, the company developed ties with the telecommunications industry along with Schlumberger.
Prior to 1999, the business was conducted through Gemplus S.C.A., a French limited partnership. In December 1999, Gemplus Associates, the general partner of Gemplus S.C.A., merged into Gemplus S.C.A., which became a joint stock company, Gemplus SA. In February 2000, the corporate structure was reorganized and a new holding company, Gemplus International SA, a Luxembourg corporation, was created. Texas Pacific Group became a shareholder of Gemplus at the time of its equity contribution in February 2000.
In December 2000, the company completed an initial public offering of its capital stock, in the form of ordinary shares traded on the Eurolist of Euronext Paris, and ADSs traded on the U.S. NASDAQ exchange. In 2004, the company completed the planned reorganization of its corporate structure by transferring most of the subsidiaries of Gemplus SA to Gemplus International SA.
In April 2005, Gemplus acquired Setec Oy, a company headquartered in Finland that, among other things, supplies conventional and electronic travel passports to various government agencies and products involving secure printing.
In June 2006, smart card providers Axalto and Gemplus merged to become Gemalto.

Android patent lawsuit

In October 2010, Gemalto filed a lawsuit against Google, Samsung, HTC and Motorola over the Android operating system in the Eastern District of Texas. Gemalto said that Android phones had memory-utilization features that it had first developed and patented, and accused the defendant companies of infringing three of its patents. Ars Technica quoted ING analysts who estimated that winning this lawsuit could potentially bring the company royalty receipts amounting to 30-50 million Euros per annum. However, in June 2014, a panel of judges in the US Court of Appeals for the Federal Circuit ruled in favor of the defendants that Android phones don't infringe on those patents.

Acquisition by Thales

In December 2017, Gemalto was the subject of a bid from the Thales Group for €4.65 Billion. This was subsequently approved by the board of directors subject to international clearance. The acquisition was completed in April 2019 not before Thales had to offload the Thales General Purpose HSM unit to Entrust Datacard. This was as part of the agreement with EU competition commission for the necessary regulatory clearance to the acquisition.

Structure

Gemalto N.V. is the holding company of the Group. The Company's authorized share capital amounts to €150 million and is divided into 150 million ordinary shares, with a nominal value of €1 per share. As of October 2012, out of these 150 million shares that are authorized to be issued by the Board, 88,015,844 shares were actually issued and in circulation. Since 2006, Gemalto comprises three market-focused divisions—Telecommunications, secure transactions and Security, as well as functional organizations for marketing; operations including both production and research and development; finance; human resources and legal.

Acquisition by Thales

In April 2019, Thales finished their acquisition of Gemalto for €4.8bn. Gemalto will become Thales' 7th global division which will be named Digital Identity and Security.

Telecommunications

Gemalto provides software solutions, subscriber identity modules and managed services to more than 700 million subscribers in the telecommunications market. Gemalto has more than 400 mobile telecom operator customers worldwide.
In 2007, Gemalto organized the telecom business into four lines—secure operated services, advanced products and data services, value-added products and service deployment, and SIM cards.
In October, Gemalto won the 2007 Frost & Sullivan Product Innovation Award in the field of mobile contactless technologies for its Smart Card Web Server.
Every year since 2000, Gemalto has organized the "SIMagine" contest, the Worldwide Mobile Communication & Java Card Developers Contest, aimed at stimulating innovations using SIM-based solutions. Sponsors include Samsung Semiconductor Europe and Sun Microsystems.
In 2016, following the Buzzinbees acquisition, it introduced the concept of SIM reactivation whereby operators can let users reuse expired SIM cards instead of purchasing new ones when they wish to re-subscribe to that operator.

Near field communications (NFC) and mobile payment

On October 30, 2008, Royal Bank of Canada, Visa and Rogers Wireless jointly announced that they were working together on the next phase of the mobile phone payment pilot, testing wireless delivery of mobile payment software and credit card information to a customer's mobile phone. The companies announced that Gemalto would provide this capability by acting as the trusted service manager to bridge banking with mobile phones. Gemalto's role is to manage the transfer of credit card information from RBC to the secure SIM card in the Rogers Wireless NFC-enabled mobile phone.
Gemalto has played the TSM role in other NFC pilots in several countries, including France and Taiwan. In November 2007, Gemalto partnered with Taiwan's Far EasTone Telecommunications Ltd. to start Asia's first mobile contactless SIM-based NFC trial, as part of the GSM Association’s "Pay-Buy Mobile" initiative.

Mobile signatures

In November 2008, Turkcell, a mobile operator in Turkey, began using Gemalto's SIM-based mobile signature solution. The solution allows the 30 million Turkcell subscribers to access services that require strong authentication, such as internet banking or e-government services using their mobile phones to generate a legally binding electronic signature.

Banking & Payment

Gemalto supplies contact and contactless cards, EMV chip cards, payment terminals, and user authentication solutions for secure online banking.
According to the Nilson report, Gemalto is the largest provider of chip cards, selling 1.5 billion chip cards, representing 49 percent of the market. At the start of 2010 in Germany 20 million ATM cards and 3.5 million credit cards were hit by an end-of-the-decade programming glitch which prevented them working.
Gemalto's customers include 300 banks.
Gemalto worldwide banking and retail customers include Santander UK, ABN AMRO Netherlands, Aktia, Finland, American Express, Banque Accord, Accord Italia, Caisse d'Épargne, La Caixa, Crédit Agricole, Diners Club Croatia, Findomestic Italy, Fortis Belgium. Hansabank Estonia, HBOS UK, HSBC UK, ING Belgium, JCB, LHV Pank Estonia, National Bank of Greece, OpBank, Parex Bank, Sampo, Société Générale, Agip France, Arena Netherlands, BMW, B.P., Esso, Sodexo, and Total France.

EMV in Turkey

In September 2008, Garanti Bank in Turkey began rolling out 300,000 Gemalto EMV contactless bankcards.

Instant Issuance

As of November 2008, Gemalto's Instant Issuance service has been installed in over 300 shopping malls worldwide, enabling one million credit cards to be issued on the spot per year.

CardLikeMe

In July 2008, Gemalto began providing its CardLikeMe service to PlasticNow in Canada, giving consumers the ability to customize their card with the photo of their choice.

eBanking and eCommerce security

Following its acquisition of Swedish security firm Todos AB in April 2010, Gemalto eBanking provides a range of eBanking and eCommerce security solutions under the Ezio brand name. The Ezio Suite includes:
Gemalto eBanking supports the Ezio Suite with services including implementation, security audit, design and consulting, training, fulfilment and support.
Ezio technology is in use in banks such as ABN AMRO, Barclays and Nordea.

Barclays

As of July 2008, more than one million Barclays customers are using Gemalto's cryptographic smart card reader, called PINsentry by Barclays for strong authentication for online banking.

FINO PayTech Limited

In June 2007, The Financial Information Network and Operations Ltd. in India began deploying Gemalto smart cards with biometric authentication. to enable microbanking and the underbanked population in rural India.

Security, public sector (e-Government)

e-Passports

Gemalto supplies electronic passports solutions to Australia, Colombia, Czech Republic, Denmark, Estonia, France, India, Italy, Latvia, Morocco, Norway, Poland, Portugal, Qatar, Singapore, Slovenia, Sweden, Turkey, Peru, Malaysia, United States and the United Kingdom among other countries.
As of March 2007, Gemalto has provided technology to more than 10 million e-passports, making them the largest provider of e-passport solutions with an estimated 30 percent market share.
In the United States, Gemalto is one of two vendors picked by the Government Printing Office to supply their e-passport program in 2007.
In September 2017, Gemalto announced that its biometric ePassport technology is currently being used in more than 30 different countries, including Algeria, Denmark, Finland, Hong Kong, France, Italy, Korea, Morocco, Norway, Peru, Portugal, Singapore, Sweden and the United States.

e-Driver’s licenses

’s licensing authority used Gemalto's smart card platform to issue the first e-driver's licenses to the city of Monterrey, Nuevo León, Mexico, in 2007. Gemalto expects to deliver more than 900,000 licenses to ICV over a three-year period. Gemalto secured a new contract to supply electronic card driver's license to three additional Mexican states in April 2008.
In December 2007, Gemalto began supplying Sweden with e-driver's licenses that contain a transparent window in the polycarbonate structure, aimed at enhanced physical security. Gemalto will supply Sweden with 600,000 e-driver's licenses per year for three years.

e-ID Citizen cards

In February 2007, the Portuguese Mint and National Printing Office picked Gemalto to provide their national e-ID Citizen Card. Gemalto provides the operating system, the personalization system and applications, the middleware and associated helpdesk services. All Portuguese citizens will ultimately carry these cards as their national ID document.

e-Healthcare cards

In September 2007, Gemalto delivered its 100 millionth e-healthcare card. Gemalto has delivered e-healthcare cards in Algeria, Belgium, China, Finland, France, Germany Mexico, Puerto Rico, Slovenia, the United Kingdom, and the United States.
In July, Allgemeine Ortskrankenkasse, a German health insurer, also picked Gemalto to supply and personalize 35 million e-health insurance cards. The cards contain emergency data such as blood group, allergy alerts and ongoing treatments, and e-prescriptions.

e-Government ID

As of December 2009, Gemalto has provided 25 million Common Access Cards to the United States Department of Defense for employee and contractor use.
ID cards issued by the Swedish Tax Agency since September 2017 have electronic identification provided by AB Svenska Pass, a subsidiary of Gemalto.

Transportation

Gemalto has provided contactless payment technology to a nationwide transport project in the Netherlands, and citywide projects in Boston, Paris, London, São Paulo and Santiago.
Gemalto has delivered more than 100 million transit cards internationally.

Security and enterprise

Gemalto supplies its enterprise services through value-added resellers and systems integrators. The company's customers include Barclays, Shell, Chevron, Pfizer, Boeing, Telia Sonera, Schlumberger and Microsoft.
In April 2008, Alternative Technology began offering Gemalto's on-demand Device Administration Service through its network of 3,000 resellers in the United States and Canada.
In April 2008, Envoy Data Corporation began offering Gemalto's on-demand Device
Administration Service through its network of IT security specialized VARs.

Pfizer

At Pfizer, 100,000 employees use Gemalto smart cards as badges.

Virchow Krause

In July 2008, Gemalto began deploying Protiva.NET Dual tokens at Virchow Krause & Company LLP, the 15th largest accounting firm in the United States.

Microsoft partnership

employees worldwide use Gemalto.NET smart card technology embedded in their corporate badge to enable access to Microsoft's own information systems.
In June 2008, Gemalto announced that Instant Badge Issuance, a solution that works directly with Microsoft Active Directory and Identity Lifecycle Manager to load digital certificates directly onto the smart card.
At Microsoft's "Heroes Happen Here" event in February 2008, Gemalto and Microsoft demonstrated the only.NET smart card technology with support built into Microsoft Windows Server 2008.
In November 2007, Gemalto made its.NET smart card, Protiva Strong Authentication Server and related Protiva credential devices, and other Windows Smart Card Framework-compatible products available for live simulation at the Microsoft Partner Solutions Center on Microsoft Corp.’s Redmond, Washington, campus.
In November 2007, Gemalto attained Gold Certified Partner status in the Microsoft Partner Program.
In 2006, Gemalto organized a Microsoft-sponsored contest, SecureTheWeb, for the best new development in secure personal devices for Web services, such as smart cards and one-time passwords.

Citrix Systems partnership

In December 2007, Gemalto announced that its Protiva platform were recognized by Citrix Systems as compatible with the Citrix Access Gateway. This followed a previous announcement earlier in January 2007 that Gemalto’s.NET and Protiva solutions were recognized by Citrix Systems as compatible with its products.
In January 2007, Gemalto was named a finalist for 2006 Solution Partner of the Year by Citrix Systems.

Verisign

In February 2007, Gemalto announced that its Network Identity Manager for online security would support the VeriSign Identity Protection Network.

Security breaches

3G/4G SIM card encryption key leak allegations

According to documents leaked by Edward Snowden, NSA's and GCHQ's Mobile Handset Exploitation Team infiltrated Gemalto's infrastructure to steal SIM authentication keys, allowing them to secretly monitor mobile communications. GCHQ codenamed the program "DAPINO GAMMA". The secret GCHQ document leaked by Snowden also claimed the ability to manipulate billing records to conceal their own activity and having access to authentication servers to decrypt voice calls and text messages. Snowden stated that "When the NSA and GCHQ compromised the security of potentially billions of phones, they not only screwed the manufacturer, they screwed all of us, because the only way to address the security compromise is to recall and replace every SIM sold by Gemalto."
The breach subsequently refueled suspicions against Gemalto chairman Alex J. Mandl, given his role in the CIA venture capital firm In-Q-Tel.
GCHQ and NSA declined to comment on the matter. Gemalto issued a press release on February 25, 2015 saying there were "reasonable grounds to believe that an operation by NSA and GCHQ probably happened", but denying that the government agencies gained access to any authentication keys.

Smart card weak key vulnerability

In October 2017, it was reported that Gemalto's IDPrime.NET smart cards, which are used internally by Microsoft and many other companies, were affected by the Infineon weak key vulnerability, leaving their private keys deducible to attackers.

Partnerships

Key partners of Gemalto include Wipro, Prodapt, Maya, Sendum, Unique Computing Solutions, Symphony Teleca, Bing, Kore, West, etc.
In 2017, OnKöl, a home care hub device started using Gemalto's M2M Module.