QSCD | Giesecke+Devrient Mobile Security GmbH | STARCOS 3.7 eIDAS C2

Certificate SRC.00057.QSCD.11.2022 Certification Report SRC.00057.QSCD.11.2022

Type of certificationQSCD | Certification of qualified signature and seal creation devices
SRC certificate registration numberSRC.00057.QSCD.11.2022
Valid from25 November 2022
Valid until31 December 2029
Certificate holderGiesecke+Devrient Mobile Security GmbH
Certified productSTARCOS 3.7 eIDAS C2
Test methodAccording to article 30 (3) a) of Regulation (EU) No. 910/2014, the certification was done on basis of a Common Criteria Evaluation against the Protection Profiles EN 419211-2:2013 and EN 419211-5:2014, which are listed in the Commission Implementing Decision (EU) 2016/650 of 25 April 2016.
The audit includes
  • the Common Criteria Evaluation of the product “STARCOS 3.7 eIDAS C2” according to the following Protection Profiles with Evaluation Assurance Level (EAL) 4+ (EAL 4 with the augmentation package AVA_VAN.5):
    • “Protection Profiles for Secure Signature Creation Device – Part 2: Device with key generation” (EN 419211-2:2013),
    • “Protection Profiles for Secure Signature Creation Device – Part 5: Extension for device with key generation and trusted channel to signature creation application” (EN 419211-5:2014) and
  • the certification of the product according to article 30 (3) a) of Regulation (EU) No. 910 / 2014 by the certification body of SRC notified by the Federal Network Agency to the EU Commission.
DescriptionThe product “STARCOS 3.7 eIDAS C2” is a qualified signature / seal creation device (QSCD). The card is a dual interface card and has a contact-based and a contactless interface.

The product consists (among other things) of the hardware platform IFX_CCI_000005h from Infineon Technologies, the card operating system STARCOS 3.7 COS HBA-SMC and an application for the generation of qualified signatures and seals.

SRC confirms that the product “STARCOS 3.7 eIDAS C2” of Giesecke + Devrient Mobile Security GmbH fulfills the requirements of annex II of Regulation (EU) No. 910/2014 (eIDAS-Regulation) for qualified signature / seal creation devices.