PP Universal SIM card

Others / Smart card and similar devices

Certification Body

Agence Nationale de la Sécurité des Systèmes d'Information (ANSSI)


SociÊtÊ Française du RadiotÊlÊphone (SFR)

Point of Contact

  • 1 place Carpeaux, Tour SĂŠquoia, 92915 Paris La DĂŠfense, France
  • certification.anssi@ssi.gouv.fr

Certification ID


PP Version


CC Version

3.1 Revision 3

CC Conformance Claim

CC part 2 conformant
CC part 3 conformant
EAL 4 augmented by ALC_DVS.2 and AVA_VAN.5
Conformance claims to this protection profile requires demonstrable conformance

Certification status

Certified 12 July 2010




The Target of Evaluation (TOE) is the (U)SIM Java Card platform embedded in a (U)SIM card intended to be plugged in a mobile phone or other mobile devices.

Usage of this Protection Profile will permit the certification according to the Common Criteria, and up to EAL4+ level, security applications loaded on a (U)SIM Java Card open platform previously certified. Those security applications will be able to coexist on the certified card with non security application (those last applications will not be certified, nevertheless they will have to be compliant with the platform constraints). As the considered cards are open, applet loading could be realized after the card issuance to the end users of the mobile devices (operational use phase).

This Protection Profile focuses on the security requirements for the (U)SIM Java Card platform. The IC and the OS are considered in this PP as the environment of the (U)SIM Java Card platform, covered by environmental security objectives. Nevertheless, any (U)SIM smart card evaluation according to this PP shall comprehend the whole in the TOE : IC, OS, all native code, (U)SIM Java Card platform and pre-loaded applet should also be included in the TOE described in the security target which claim conformance with this PP, see chapter 3.2 for further details.

Relation to other PPs

This Protection Profile is conforming to the PP Java Card System - Open Configuration.

The USIM PP refers to the previous version of the JavaCard PP (v2.6). The update of the JavaCard PP (3.0) identifies some features of the previous one as optional. The JIWG has decided that those options are not mandated to be implemented in order to be compliant with the USIM PP.