||A major contributor to this article appears to have a close connection with its subject. (July 2014)|
|Traded as||Euronext: GTO|
|Alex Mandl (Chairman), Olivier Piou (CEO)|
|Products||Smart cards and related software and services, card terminals|
|Revenue||€2.246 billion (2012)|
|€238.7 million (2012)|
|Profit||€201 million (2012)|
|Total assets||€2.715 billion (end 2012)|
|Total equity||€1.932 billion (end 2012)|
Number of employees
|> 10,000 (2012)|
Gemalto is an international digital security company providing software applications, secure personal devices such as smart cards and tokens, and managed services. It is the world’s largest manufacturer of SIM cards.
The company was founded in June 2006 when two companies, Axalto and Gemplus International, merged. Gemalto's 2012 revenue was €2.246 billion. It is listed on both Euronext Amsterdam and Euronext Paris under the symbol GTO.
Gemalto N.V. is a public company incorporated in the Netherlands. It is headquartered in Amsterdam, and has subsidiaries and group companies in several countries. Globally, Gemalto has over 13,000 employees, 74 sales and marketing offices; 15 production sites, 28 personalization centers, and 14 R&D centers in 43 countries.
- 1 History
- 2 Structure
- 3 Telecommunications
- 4 Secure transactions
- 5 Security, public sector (e-Government)
- 6 Security and enterprise
- 7 Security breaches
- 8 See also
- 9 References
- 10 External links
In June 2006, smart card providers Axalto and Gemplus merged to become Gemalto. Axalto was a Schlumberger IPO spin-off in 2004. Between the merger and 2012, Gemalto completed a series of acquisitions: the Leigh Mardon’s personalization center (Taiwan), Multos International, NamITech in South Africa, NXP mobile services business, the mobile software solution provider O3SIS, Trusted Logic (the secure software platform provider), Serverside (personalization of bank cards with digital images generated by end users), XIRING’s banking activity, Netsize (a mobile communications service and commerce enabler), Valimo Wireless, a provider in mobile authentication, the internet banking security specialist Todos AB in Sweden, Cinterion the German specialist of machine-to-machine (M2M), SensorLogic (an M2M service delivery platform provider), Plastkart in Turkey and Ericsson’s mobile payment platform IPX.
Axalto and Schlumberger
Schlumberger began its chip card activities in February 1979 when it licensed and marketed certain chip card technologies developed and patented by Roland Moreno, who is generally credited with the invention of the chip card.
Schlumberger developed the first telephone chip cards for France Telecom and the Swedish telecommunications operator Telia in the early 1980s. The company developed ties with telecommunications operators in several countries, and played a role in industry-wide efforts to develop new digital mobile communication standards, particularly the GSM transmission standard (Global System for Mobile Communication). Schlumberger designed its first SIM card in the early 1990s for the launch of GSM in Europe, and this led to the use of microprocessor card technology as an access and security solution for mobile telephony worldwide, in 3 billion handsets today.
In the early 1980s, the French banking sector decided to migrate from the magnetic stripe card-based payment system to a more modern and secure microprocessor card-based system. Schlumberger received its first contract in June 1981 to provide GIE Cartes Bancaires, the French credit/debit card issuers’ association, with 5,000 microprocessor cards and 200 associated POS terminals. The microprocessor card-based payment system subsequently became standard in France and eventually led to a global standard known as EMV, set up by Europay, MasterCard and Visa.
Schlumberger experienced internal and external growth since the launch of its chip card operations in the early 1980s through the 1990s and 2000s, both in terms of revenue and product portfolio, particularly with the substantial growth in GSM-based mobile telecommunications. Acquisitions of regional companies in card production and personalization included Cowells (United Kingdom), Malco (United States), Printer (Mexico) and Cardtech (Brazil), followed by Solaic in 1996 and Bull-CP8 from Bull in 2001, in France and China.
In 2003, Schlumberger created Axalto as a division to consolidate into one company all of its card and POS terminal activities, which until then had been managed by several subsidiaries and joint ventures of the Schlumberger group. Subsequently Axalto was listed on the Euronext Paris market on May 18, 2004.
Founded by Marc Lassus (among others), Gemplus started its operations in 1988 as a supplier of prepaid phonecards. Because of its presence in the market of the prepaid phonecards during the 1990s, the company developed ties with the telecommunications industry along with Schlumberger.
Prior to 1999, the business was conducted through Gemplus S.C.A., a French limited partnership. In December 1999, Gemplus Associates, the general partner of Gemplus S.C.A., merged into Gemplus S.C.A., which became a joint stock company, Gemplus SA. In February 2000, the corporate structure was reorganized and a new holding company, Gemplus International SA, a Luxembourg corporation, was created. Texas Pacific Group became a shareholder of Gemplus at the time of its equity contribution in February 2000.
In December 2000, the company completed an initial public offering of its capital stock, in the form of ordinary shares traded on the Eurolist of Euronext Paris, and ADSs traded on the U.S. NASDAQ exchange. In 2004, the company completed the planned reorganization of its corporate structure by transferring most of the subsidiaries of Gemplus SA to Gemplus International SA.
In April 2005, Gemplus acquired Setec Oy, a company headquartered in Finland that, among other things, supplies conventional and electronic travel passports to various government agencies and products involving secure printing.
In June 2006, smart card providers Axalto and Gemplus merged to become Gemalto.
Android patent lawsuit
On October 2010, Gemalto filed a lawsuit against Google, Samsung, HTC and Motorola over the Android operating system in the Eastern District of Texas. Gemalto said that Android phones had memory-utilization features that it had first developed and patented, and accused the defendant companies of infringing three of its patents. Ars Technica quoted ING analysts who estimated that winning this lawsuit could potentially bring the company royalty receipts amounting to 30-50 million Euros per annum. However, in June 2014, a panel of judges in the US Court of Appeals for the Federal Circuit ruled in favor of the defendants that Android phones don't infringe on those patents.
Gemalto N.V. is the holding company of the Group. The Company’s authorized share capital amounts to €150 million and is divided into 150 million ordinary shares, with a nominal value of €1 per share. As of October 2012, out of these 150 million shares that are authorized to be issued by the Board, 88,015,844 shares were actually issued and in circulation. Since 2006, Gemalto comprises three market-focused divisions—Telecommunications, secure transactions and Security, as well as functional organizations for marketing; operations including both production and research and development; finance; human resources and legal.
In total, there are six major shareholders in the control of Gemalto.
- Caisse des Dépôts et Consignations (CDC): 8.43%
- Europacific Growth Fund: 5.16%
- Amundi: 3.05%
- Morgan Stanley: 2.91%
- Goldman Sachs: 2.77%
- BlackRock: 2.26%
Gemalto provides software solutions, subscriber identity modules (SIM) and managed services to more than 700 million subscribers in the telecommunications market. Gemalto has more than 400 mobile telecom operator customers worldwide.
In 2007, Gemalto organized the telecom business into four lines—secure operated services, advanced products and data services, value-added products and service deployment, and SIM cards.
Every year since 2000, Gemalto has organized the "SIMagine" contest, the Worldwide Mobile Communication & Java Card Developers Contest, aimed at stimulating innovations using SIM-based solutions. Sponsors include Samsung Semiconductor Europe and Sun Microsystems.
Near field communications (NFC) and mobile payment
On October 30, 2008, Royal Bank of Canada, Visa and Rogers Wireless jointly announced that they were working together on the next phase of the mobile phone payment pilot, testing wireless delivery of mobile payment software and credit card information to a customer's mobile phone. The companies announced that Gemalto would provide this capability by acting as the trusted service manager to bridge banking with mobile phones. Gemalto’s role is to manage the transfer of credit card information from RBC to the secure SIM card in the Rogers Wireless NFC-enabled mobile phone.
Gemalto has played the TSM role in other NFC pilots in several countries, including France and Taiwan. In November 2007, Gemalto partnered with Taiwan’s Far EasTone Telecommunications Ltd. to start Asia’s first mobile contactless SIM-based NFC trial, as part of the GSM Association’s "Pay-Buy Mobile" initiative.
In September 2008, Gemalto began providing Italian mobile operator WIND with its Smart Video Card, which embeds a DVD-compliant optical disc into the card body of a regular SIM card. Smart Video Card can store any digital content including video, software or Internet links and can be played on any DVD drive.
In November 2008, Turkcell, a mobile operator in Turkey, began using Gemalto’s SIM-based mobile signature solution. The solution allows the 30 million Turkcell subscribers to access services that require strong authentication, such as internet banking or e-government services using their mobile phones to generate a legally binding electronic signature.
Gemalto supplies contact and contactless cards, EMV chip cards, payment terminals, and user authentication solutions for secure online banking.
According to the Nilson report, Gemalto is the largest provider of chip cards, selling 1.5 billion chip cards, representing 49 percent of the market. At the start of 2010 in Germany 20 million ATM cards and 3.5 million credit cards were hit by an end-of-the-decade programming glitch which prevented them working.
Gemalto’s customers include 300 banks.
Gemalto worldwide banking and retail customers include Abbey U.K, ABN AMRO Netherlands, Atkia, Finland, American Express, Banque Accord (France), Accord Italia (Italy), Caisse d'Épargne (France), La Caixa (Spain), Crédit Agricole (France), Diners Club Croatia, Findomestic Italy, Fortis Belgium. Hansabank Estonia, HBOS UK, HSBC UK, ING Belgium, JCB, National Bank of Greece, OpBank, Parex Bank (Latvia), Sampo (Finland), Société Générale, Agip France, Arena Netherlands, BMW, B.P., Esso, Sodexho, and Total France.
EMV in Turkey
In July 2008, Gemalto began providing its CardLikeMe service to PlasticNow in Canada, giving consumers the ability to customize their card with the photo of their choice.
eBanking and eCommerce security
Following its acquisition of Swedish security firm Todos AB in April 2010, Gemalto eBanking provides a range of eBanking and eCommerce security solutions under the Ezio brand name. The Ezio Suite includes:
- The Ezio Server that supports multiple authentication techniques, including two-factor authentication, one-time passwords, challenge-response, dynamic signatures and sign-what-you-see.
- Authentication devices including smart card readers and tokens
- Mobile phone authentication using SIM, apps or SMS
Gemalto eBanking supports the Ezio Suite with services including implementation, security audit, design and consulting, training, fulfilment and support.
FINO PayTech Limited
In June 2007, The Financial Information Network and Operations Ltd. (FINO PayTech Limited) in India began deploying Gemalto smart cards with biometric authentication. to enable microbanking and the underbanked population in rural India.
Security, public sector (e-Government)
Gemalto provides technology to the governments of more than 30 countries.
Gemalto supplies electronic passports (e-passports) solutions to the United States, Singapore, Czech Republic, Denmark, Estonia, France, India, Italy, Latvia, Norway, Qatar, Poland, Portugal, Slovenia, Morocco, Sweden and Turkey.
As of March 2007, Gemalto has provided technology to more than 10 million e-passports, making them the largest provider of e-passport solutions with an estimated 30 percent market share.
In the United States, Gemalto is one of two vendors picked by the Government Printing Office to supply their e-passport program in 2007.
Mexico’s licensing authority (ICV) used Gemalto’s smart card platform to issue the first e-driver’s licenses to the city of Monterrey, Nuevo León, Mexico, in 2007. Gemalto expects to deliver more than 900,000 licenses to ICV over a three-year period. Gemalto secured a new contract to supply electronic card driver’s license to three additional Mexican states in April 2008.
In December 2007, Gemalto began supplying Sweden with e-driver’s licenses that contain a transparent window in the polycarbonate structure, aimed at enhanced physical security. Gemalto will supply Sweden with 600,000 e-driver’s licenses per year for three years.
e-ID Citizen cards
In February 2007, the Portuguese Mint and National Printing Office (INCM) picked Gemalto to provide their national e-ID Citizen Card. Gemalto provides the operating system, the personalization system and applications, the middleware and associated helpdesk services. All Portuguese citizens will ultimately carry these cards as their national ID document.
In September 2007, Gemalto delivered its 100 millionth e-healthcare card. Gemalto has delivered e-healthcare cards in Algeria, Belgium, China, Finland, France, Germany Mexico, Puerto Rico, Slovenia, the United Kingdom, and the United States.
In July, Allgemeine Ortskrankenkasse (AOK), a German health insurer, also picked Gemalto to supply and personalize 35 million e-health insurance cards. The cards contain emergency data such as blood group, allergy alerts and ongoing treatments, and e-prescriptions.
Gemalto has delivered more than 100 million transit cards internationally.
Security and enterprise
Gemalto supplies its enterprise services through value-added resellers (VARs) and systems integrators. The company’s customers include Barclays, Shell, Chevron, Pfizer, Boeing, Telia Sonera, Schlumberger and Microsoft.
In April 2008, Alternative Technology began offering Gemalto’s on-demand Device Administration Service (DAS) through its network of 3,000 resellers in the United States and Canada.
In June 2008, Gemalto announced that Instant Badge Issuance (IBI), a solution that works directly with Microsoft Active Directory and Identity Lifecycle Manager (ILM) to load digital certificates directly onto the smart card.
In November 2007, Gemalto made its .NET smart card, Protiva Strong Authentication Server and related Protiva credential devices, and other Windows Smart Card Framework-compatible products available for live simulation at the Microsoft Partner Solutions Center on Microsoft Corp.’s Redmond, Washington, campus.
In November 2007, Gemalto attained Gold Certified Partner status in the Microsoft Partner Program.
In 2006, Gemalto organized a Microsoft-sponsored contest, SecureTheWeb, for the best new development in secure personal devices for Web services, such as smart cards and one-time passwords (OTPs).
Citrix Systems partnership
In December 2007, Gemalto announced that its Protiva platform were recognized by Citrix Systems as compatible with the Citrix Access Gateway. This followed a previous announcement earlier in January 2007 that Gemalto’s .NET and Protiva solutions were recognized by Citrix Systems as compatible with its products.
In January 2007, Gemalto was named a finalist for 2006 Solution Partner of the Year by Citrix Systems.
According to documents leaked by Edward Snowden, NSA's and GCHQ's Mobile Handset Exploitation Team infiltrated Gemalto's infrastructure to steal SIM authentication keys, allowing them to secretly monitor mobile communications. GCHQ codenamed the program "DAPINO GAMMA". The secret GCHQ document leaked by Snowden also claimed the ability to manipulate billing records to conceal their own activity and having access to authentication servers to decrypt voice calls and text messages. Snowden stated that "When the NSA and GCHQ compromised the security of potentially billions of phones (3g/4g encryption relies on the shared secret resident on the sim), they not only screwed the manufacturer, they screwed all of us, because the only way to address the security compromise is to recall and replace every SIM sold by Gemalto."
GCHQ and NSA declined to comment on the matter. Gemalto issued a press release on February 25, 2015 saying there were "reasonable grounds to believe that an operation by NSA and GCHQ probably happened," but denying that the government agencies gained access to any authentication keys.
- "Annual Report 2012". Gemalto.
- "The endangered SIM card". The Economist. November 22, 2014.
- Gemalto applies for a Dual Listing...
- 2011 Annual Report
- "GSM World Statistics". Archived from the original on 22 August 2008. Retrieved 1 November 2008.
- "McKool Smith Represents Gemalto In Patent Infringement Lawsuit Over Android Gemalto". McKool Smith. 2010-10-23.
- "Digital security company Gemalto loses patent fight against Android". Ars Technica. 2014-06-20.
- "Profil société de Gemalto". abcbourse. NYSE-Euronext and Quanthouse. Retrieved 20 February 2015.
- "Frost & Sullivan Awards Gemalto for its Innovative Solutions in Mobile Contactless Technologies". Retrieved 1 November 2008.
- "Rogers Wireless joins RBC and Visa in mobile phone payment pilot". Retrieved 1 November 2008.
- Jeremy Kirk. "Millions of German credit card holders hit by decade-end glitch". computerworlduk.com. Retrieved 2010-01-20.
- "Gemalto Web site". Retrieved 1 November 2008.
- "Garanti Bank Rolls-Out Gemalto’s Most Advanced EMV Contactless Credit Cards in Turkey". Retrieved 1 November 2008.
- "Gemalto’s Instant Issuance Solution Now Deployed in over 300 Shopping Malls Worldwide, Enabling Hand-to-Hand Delivery of One Million Credit Cards per Year". Retrieved 1 November 2008.
- "Gemalto Web Service Enables Personalized Photos on PlasticNow MasterCard Cards in Canada". Retrieved 1 November 2008.
- "Over One Million Barclays Customers Bank Online with Gemalto's Solution in the UK". Retrieved 1 November 2008.
- "FINO Adopts Gemalto Smartcards To Accelerate Microbanking Deployment In India". Retrieved 1 November 2008.
- "Government of India selects Gemalto to jump-start electronic passport program with first rollout for diplomats". Retrieved 1 November 2008.
- "Gemalto Ranked as Leading Supplier of e-Passport Programs by Keesing Journal of Documents & Identity". Retrieved 1 November 2008.
- "Gemalto Delivers First Smart Card Driving License Program in Mexico".
- "Gemalto Expands e-Driver License Contract to 3 Additional States in Mexico". Retrieved 1 November 2008.
- "Gemalto Provides Swedish Citizens with Driving Licenses Incorporating World's First Clear Window Security Feature". Retrieved 1 November 2008.
- "Gemalto Selected for the National Identity Project of Portugal". Retrieved 1 November 2008.
- "Gemalto to Deliver 35 Million e-Health Cards for German Citizens". Retrieved 1 November 2008.
- "Gemalto to Provide 3.5 Million Transit Payment Devices to Massachusetts Bay Transportation Authority". Retrieved 1 November 2008.
- "Gemalto Corporate Brochure" (PDF). Retrieved 1 November 2008.
- "Alternative Technology to Offer Gemalto’s Web-based Authentication Device Administration" (PDF). Retrieved 1 November 2008.
- "Envoy Data Adds Gemalto’s On-Demand Smart Card Admin Service to its Lineup" (PDF). Retrieved 1 November 2008.
- "How Pfizer Did ID Management Right". Retrieved 1 November 2008.
- "U.S. Accounting Firm Virchow Krause Selects Gemalto to Protect Client Data". Retrieved 1 November 2008.
- "Gemalto Attains Gold Certified Partner Status in Microsoft Partner Program". Retrieved 1 November 2008.
- "Microsoft Enterprise Customers Gain Speed, Security with Gemalto’s Instant Issuance for Converged Badges". Retrieved 1 November 2008.
- "Gemalto Adds Strong Identity Protection Support to Microsoft Windows Server 2008". Retrieved 1 November 2008.
- "IT Leaders Can Now Experience Gemalto Digital Security First Hand When Visiting Microsoft". Retrieved 1 November 2008.
- "Gemalto Attains Gold Certified Partner Status in Microsoft Partner Program". Retrieved 1 November 2008.
- "Gemalto Announces Winners of its SecureTheWeb Developer Contest, Sponsored by Microsoft" (PDF). Retrieved 1 November 2008.
- "Gemalto Adds Strong Identity Protection to Citrix Access Gateway".
- "Gemalto Digital Security Solutions Now 'Citrix Ready'". Retrieved 1 November 2008.
- "Gemalto Named Finalist for 2006 Solution Partner of the Year by Citrix Systems". Retrieved 1 November 2008.
- "Gemalto Powers Online Security with Unprecedented Simplicity". Retrieved 1 November 2008.
- "Sim card database hack gave US and UK spies access to billions of cellphones". The Guardian.
- "The Great SIM Heist: How Spies Stole the Keys to the Encryption Castle". Retrieved 19 February 2015.
- "We are Edward Snowden, Laura Poitras and Glenn Greenwald from the Oscar-winning documentary CITIZENFOUR. AUAA.". Reddit. Retrieved 25 February 2015.
- "Gemalto: un président trop proche de la NSA". L'Express.
- "Gemalto Says Hack Didn’t Result in Massive Theft of SIM Keys". The Wall Street Journal.
- "Gemalto presents the findings of its investigations into the alleged hacking of SIM card encryption keys by Britain's Government Communications Headquarters (GCHQ) and the U.S. National Security Agency (NSA)". Gemalto.
- "Gemalto: NSA/GCHQ Hack ‘Probably Happened’ But Didn’t Include Mass SIM Key Theft". TechCrunch.