|
PP for a Secure Signature Creation Device - Part 2: Device with Key Generation
SSCD / Smart card and similar devices
|
Certification Body |
Bundesamt fĂźr Sicherheit in der Informationstechnik (BSI) |
|
Sponsor |
CEN/ISSS |
|
Point of Contact |
|
|
Certification ID |
BSI-CC-PP-0059-2009-MA-02 which updates BSI-CC-PP-0059-2009-MA-01 which updates |
|
PP Version |
EN 419211-2:2013, V2.0.1 The official version of the Protection Profile is available via the regular distribution path for EN standards or its national translations (see here for details) |
|
CC Version |
3.1 Revision 3 |
|
CC Conformance Claim |
CC part 2 extended CC part 3 conformant EAL 4 augmented by AVA_VAN.5 Conformance claims to this protection profile requires strict conformance |
|
Certification status |
Maintained 30 June 2016 Maintained 21 February 2012 Certified 11 December 2009 |
|
Language |
English |
|
Summary |
The Protection Profile (PP) has been provided by the Technical Committee CEN/TC 224. It is referenced by the Commission Implementing Decision (EU) 2016/650 of 25 April 2016 laying down standards for the security assessment of qualified signature and seal creation devices pursuant to Articles 30(3) and 39(2) of Regulation (EU) No 910/2014 of the European Parliament and of the Council on electronic identification and trust services for electronic transactions in the internal market. The intent of the Protection Profile is to specify functional and assurance requirements for a secure signature-creation device (SSCD) which is the target of evaluation (TOE). The Protection Profile describes core security requirements for a secure device that can generate a signing key (signature-creation data, SCD) and operates to create electronic signatures with the generated key. After an SSCD has generated a signing key, the corresponding public key (signature verification data, SVD) has to be provided as input to a certificate generating application (CGA). Security requirements for export of the SVD are not covered within this document. When operated in a secure environment for signature creation a signer may use an SSCD that fulfils only these core security requirements to create an advanced electronic signature. Security requirements for an SSCD used in other environments are not subject of this Protection Profile. |
|
Relation to other PPs |
The maintained Protection Profile is an update of the following Protection Profile :
|