QSCD | Giesecke+Devrient ePayments GmbH | STARCOS 3.7 eIDAS C3

Certificate SRC.00070.QSCD.08.2024 Certification Report SRC.00070.QSCD.08.2024

Type of certificationQSCD | Certification of qualified signature and seal creation devices
SRC certificate registration numberSRC.00070.QSCD.08.2024
Valid from26 August, 2024
Valid until25 August, 2029
Certificate holderGiesecke+Devrient ePayments GmbH
Certified productSTARCOS 3.7 eIDAS C3
Test methodAccording to article 30 (3) a) of Regulation (EU) No. 910/2014, the certification was done on basis of a Common Criteria Evaluation against the Protection Profiles EN 419211-2:2013 and EN 419211-5:2014, which are listed in the Commission Implementing Decision (EU) 2016/650 of 25 April 2016.
The audit includes
  • the Common Criteria Evaluation of the product “STARCOS 3.7 eIDAS C3” according to the following Protection Profiles with Evaluation Assurance Level (EAL) 4+ (EAL 4 with the augmentation package AVA_VAN.5):
    • “Protection Profiles for Secure Signature Creation Device – Part 2: Device with key generation” (EN 419211-2:2013),
    • “Protection Profiles for Secure Signature Creation Device – Part 5: Extension for device with key generation and trusted channel to signature creation application” (EN 419211-5:2014) and
  • the certification of the product according to article 30 (3) a) of Regulation (EU) No. 910 / 2014 by the certification body of SRC notified by the Federal Network Agency to the EU Commission.
DescriptionThe product “STARCOS 3.7 eIDAS C3” is a qualified signature / seal creation device (QSCD). The card is a dual interface card and has a contact-based and a contactless interface.

The product consists (among other things) of the hardware platform IFX_CCI_000005h from Infineon Technologies, the card operating system STARCOS 3.7 COS HBA-SMC and an application for the generation of qualified signatures and seals.

SRC confirms that the product “STARCOS 3.7 eIDAS C3” of Giesecke + Devrient ePayments GmbH fulfills the requirements of annex II of Regulation (EU) No. 910/2014 (eIDAS-Regulation) for qualified signature / seal creation devices.