I'm a lead architect of NXP's JavaCard/GlobalPlatform JCOP products. I represent NXP at the JavaCard Forum.

My role was to provide company-wide technical expertise and leadership, working on Systar's capacity reporting and capacity management products.

After the acquisition of Trusted Logic by Gemalto, I continued working on Trusted Foundations, providing technical support to R&D, marketing, and sales throughout the Gemalto group.I worked on external security consultancy projects.

I was the leader of the GlobalPlatform TEE specification working group and editor of the core GlobalPlatform TEE specifications (client API and internal API). I coordinated the inputs of a group of around ten members and contributed a large part of the content myself.

I was responsible for the design and implementation of the Trusted Foundations product, a secure embedded Operating System targeting Digital Right Management and payment applications on mobile phones and multimedia devices, utilizing ARM TrustZone® hardware virtualization features for its low-level isolation.As chief architect, I designed a secure multi-threaded kernel and embedded file-system from the ground up. I wrote the technical specifications and product documentation (~900 pages). I also supported the sales and marketing process, participating to prospect and customer meetings. I became expert in ARM micro-architecture, mobile application processors (TI OMAP, NVidia Tegra, ST-Ericsson, Samsung, Intel, Qualcomm), and high-level OS (particularly Android). As R&D Manager, I led the development team bringing the product from early prototypes to wide-scale deployment in tens of millions of devices. I also setup a quality process with continuous builds, code reviews, quality assurance and rigorous release process.

I was responsible of specifications and requirements and participated to the development of demonstrators and prototypes of a "Security Module" for ARM processors, an early version of what would become Trusted Foundations in the following years.

Various projects on payment terminals and Java virtual machine implementations.Design and development of an embedded Java bytecode verifier using static code analysis and type checking.While working on this bytecode verifier, I discovered a critical security vulnerability in the Java specification and implementation. See Sun Security Bulletin #218 (http://ftp.uni-siegen.de/cert-security/vendor/sun/security-alert/security-alert-218.txt)

I worked with Sun Microsystems to make the Java Card Reference Implementation run on an actual Infineon smart-card chip based on a 8051 architecture. I designed and developed an embedded on-card debugger for Java Card.I also maintained and supported Trusted Logic’s Java Card bytecode verifier.