QSCD | Giesecke+Devrient Mobile Security GmbH | STARCOS 3.5 ID GCC C1R

Certificate SRC.00014.TE.02.2012 Certificate SRC.00014.TE.02.2012 // Amendment 1 Certificate SRC.00014.TE.02.2012 // Amendment 2 Confirmation SRC.00014.TE.02.2012 Confirmation SRC.00014.TE.02.2012 // Amendment 1 Confirmation SRC.00014.TE.02.2012 // Amendment 2

Type of certification	QSCD \| Certification of qualified signature and seal creation devices
SRC certificate registration number	SRC.00014.TE.02.2012
Valid from	February 1, 2012
Valid until	December 31, 2023
Certificate holder	Giesecke+Devrient Mobile Security GmbH
Certified product	STARCOS 3.5 ID GCC C1R
Test method	According to the regulations of SigG and SigV, the confirmation was performed on the basis of a Common Criteria Evaluation according to the Protection Profiles “Protection profile for secure signature creation device, Part 2: Device with key generation” and “Protection Profile – Electronic Identity Card (ID_Card PP)”. The evaluation was performed with Evaluation Assurance Level (EAL) 4+ and assuming an high attack potential (augmentation AVA_VAN.5).
The audit includes	the Common Criteria Evaluation of the product “STARCOS 3.5 ID GCC C1R” according to the following Protection Profiles with Evaluation Assurance Level (EAL) 4+ (EAL 4 with the augmentation packages AVA_VAN.5, ATE_DPT.2 and ALC_DVS.2): “Protection profiles for secure signature creation device, Part 2: Device with key generation” “Protection Profile – Electronic Identity Card (ID_Card PP)”, the confirmation of the product according to article 15 paragraph 7 sentence 1, article 17 paragraph 1 Signaturgesetz (SigG) as well as article 15 paragraphs 1 and 4, article 11 paragraph 3 Signaturverordnung (SigV) by the confirmation body of SRC accredited by Bundesnetzagentur and two amendments to extend the confirmation: Amendment 1: Adaptation of the requirements of the signature key or card holder Amendment 2: Supplementation of information on the manufacturer, extension of the period of validity. In accordance with the transitional measures of article 51, paragraph 1 of Regulation (EU) No. 910/2014, the product can be considered as qualified signature creation device (QSCD) in the sense given in this regulation.
Description	The product “STARCOS 3.5 ID GCC C1R” is a secure signature creation device (SSCD) according to SigG and SigV. The card is a new German (electronic) national identity card and has a contactless interface. The product consists (among other things) of the semiconductor (IC) P5CD128V0A from NXP, the card operating system STARCOS 3.5 and an application for generating qualified signatures. SRC confirms that the product “STARCOS 3.5 ID GCC C1R” of Giesecke+Devrient Mobile Security GmbH fulfills the requirements of article 17 paragraphs 1 and 3 number 1 SigG and article 15 paragraphs 1 and 4, annex 1, I, 1.1 to 1.3 SigV. In accordance with the transitional measures of article 51, paragraph 1 of Regulation (EU) No. 910/2014, the product can be considered as qualified signature creation device (QSCD) in the sense given in this regulation.