QSCD | Giesecke+Devrient Mobile Security GmbH | STARCOS 3.5 ID ECC C1R



Certificate SRC.00021.TE.05.2013 Certificate SRC.00021.TE.05.2013 // Corrigendum 1 Certificate SRC.00021.TE.05.2013 // Addendum 1 Certificate SRC.00021.TE.05.2013 // Addendum 2 Certificate SRC.00021.TE.05.2013 // Addendum 3 Certificate SRC.00021.TE.05.2013 // Addendum 4 Certificate SRC.00021.TE.05.2013 // Addendum 5 Confirmation SRC.00021.TE.05.2013 Confirmation SRC.00021.TE.05.2013 // Corrigendum 1 Confirmation SRC.00021.TE.05.2013 // Addendum 1 Confirmation SRC.00021.TE.05.2013 // Addendum 2 Confirmation SRC.00021.TE.05.2013 // Addendum 3 Confirmation SRC.00021.TE.05.2013 // Addendum 4 Confirmation SRC.00021.TE.05.2013 // Addendum 5

Type of CertificationQSCD | Certification of Qualified Signature and Seal Creation Devices
SRC Certificate Registration NumberSRC.00021.TE.05.2013
Valid FromMay 13, 2013
Valid UntilDecember 31, 2023
Certificate HolderGiesecke+Devrient Mobile Security GmbH
Certified ProductSTARCOS 3.5 ID ECC C1R
Evaluation MethodIn accordance with the requirements of the SigG and SigV, the confirmation was issued based on a Common Criteria evaluation according to the Protection Profiles “Protection Profile for secure signature creation device — Part 2: Device with key generation”. The evaluation was conducted at evaluation assurance level EAL 4+ and against a high attack potential (augmentation AVA_VAN.5).
The Evaluation Includes
  • the Common Criteria evaluation of the product “STARCOS 3.5 ID ECC C1R” according to the following Protection Profiles at evaluation assurance level EAL 4+ (EAL 4 with augmentation AVA_VAN.5):
    • “Protection Profiles for secure signature creation device — Part 2: Device with key generation”,
  • the confirmation of the product in accordance with §§ 15 para. 7 sentence 1, 17 para. 1 Signature Act (SigG) and §§ 15 para. 1 and 4, 11 para. 3, Signature Ordinance (SigV) by the SRC confirmation body accredited by the Federal Network Agency,
  • a corrigendum for editorial adjustment of the confirmation, and
  • five addenda to extend the confirmation:
    • Addendum 1: Addition of further trade names
    • Addendum 2: Addition of functional description and conditions of use
    • Addendum 3: Extension of the validity period
    • Addendum 4: Addition of manufacturer information
    • Addendum 5: Addition of functional description.

Due to the transitional measures pursuant to Regulation (EU) No. 910/2014, Article 51, paragraph 1, the product is considered a QSCD in accordance with the aforementioned regulation.

Description

The product “STARCOS 3.5 ID ECC C1R” is a secure signature creation device (SSCD) in accordance with SigG and SigV. The card is a dual interface card and can be used purely contact-based, purely contactless, or as a dual interface card, depending on its configuration.

The product consists of, among other components, the semiconductor (IC) M7820 A11 from Infineon Technologies AG, the card operating system STARCOS 3.5, and an application for generating qualified signatures. Depending on the underlying hardware variant, the product is also marketed under the designations STARCOS 3.5 ID ECC C1R/360, /800, or /1280. The hardware variants differ only in terms of available memory sizes.

SRC certifies that the product “STARCOS 3.5 ID ECC C1R” from Giesecke+Devrient Mobile Security GmbH meets the requirements pursuant to § 17 para. 1 and 3 No. 1 SigG and § 15 para. 1 and 4, Annex 1, I, 1.1 to 1.3 SigV.

Due to the transitional measures pursuant to Regulation (EU) No. 910/2014, Article 51, paragraph 1, the product is considered a QSCD in accordance with the aforementioned regulation.