PP for a Machine Readable Travel Document using Standard Inspection Procedure with PACE

Passport / Smart card and similar devices

Certification Body

Bundesamt fĂźr Sicherheit in der Informationstechnik (BSI)
supported by
Agence Nationale de la Sécurité des Systèmes d'Information (ANSSI)


Bundesamt fĂźr Sicherheit in der Informationstechnik (BSI)

Point of Contact



Certification ID

BSI-CC-PP-0068-V2-2011-MA-01 which updates


PP Version


CC Version

3.1 Revision 4

CC Conformance Claim

CC part 2 extended
CC part 3 conformant
EAL 4 augmented by ALC_DVS.2, ATE_DPT.2 and AVA_VAN.5
Conformance claims to this protection profile requires strict conformance

Certification status

Maintained 31 July 2014
Certified 10 November 2011




The PACE Protection Profile (PP) defines the functional and assurance requirements for a Machine Readable Travel Document based on the requirements and recommendations of the International Civil Aviation Organisation (ICAO).

The Target of Evaluation (TOE) defined in the PP is an travel document representing a contactless smart card using PACE and programmed according to ICAO Technical Report "Supplemental Access Control", Version 1.0.

The major scope of the travel document's chip is to be a means which a traveller can present to the inspection system for proving his or her identity. This may happen through conscious presenting of the travel document to authorities.

The TOE shall comprise at least the circuitry of the contactless chip incl. all IC dedicated software being active in the operational phase of the TOE (the integrated circuit, IC), the IC Embedded Software (operating system), the ePassport application and the associated guidance documentation.

The life phases for the current TOE are development, manufacturing, card issuing and, finally, operational use.

Relation to other PPs

The Protection Profile is an update of the Protection Profile :

  • v1.0 (BSI-CC-PP-0068-V2-2011)