QSCD | T-Systems International GmbH | TCOS Health Professional Card Version 2.0 Release 1/SLE78CLX1440P

Certificate SRC.00023.TE.04.2016 Confirmation SRC.00023.TE.04.2016

Type of certification	QSCD \| Certification of qualified signature and seal creation devices
SRC certificate registration number	SRC.00023.TE.04.2016
Valid from	April 18, 2016
Valid until	December 31, 2022
Certificate holder	T-Systems International GmbH
Certified product	TCOS Health Professional Card Version 2.0 Release 1/SLE78CLX1440P
Test method	In accordance with the requirements of the SigG and SigV, the confirmation was issued on the basis of a Common Criteria evaluation in accordance with the Protection Profiles “Protection profiles for secure signature creation device, Part 2: Device with key generation” and “Protection profiles for secure signature creation device, Part 4: Extension for device with key generation and trusted communication with certificate generation application”. The evaluation was performed at assurance level EAL 4+ and against a high attack potential (augmentation AVA_VAN.5).
The evaluation covers	the Common Criteria evaluation of the product “TCOS Identity Card Version 1.1 Release 2/P60D144” against the following Protection Profiles at assurance level EAL 4+ (EAL 4 with the augmentations AVA_VAN.5, ATE_DPT.2 and ALC_DVS.2) “Protection Profile for secure signature creation device, Part 2: Device with key generation” “Protection profiles for secure signature creation device, Part 4: Extension for device with key generation and trusted communication with certificate generation application” and the confirmation of the product in accordance with Section 15 (7) sentence 1 and Section 17 (1) of the Signature Act (SigG) as well as Section 15 (1) and (4) and Section 11 (3) of the Signature Ordinance (SigV) by SRC’s confirmation body accredited by the Federal Network Agency (Bundesnetzagentur). Due to the transitional measures pursuant to Regulation (EU) No 910/2014, Article 51(1), the product is considered a QSCD under the said Regulation.
Description	The product “TCOS Health Professional Card Version 2.0 Release 1/SLE78CLX1440P” is a secure signature creation device (SSCD) in accordance with the SigG and SigV. The card is a dual-interface card, i.e. it has both a contact and a contactless interface. Among other components, the product consists of the Infineon semiconductor (IC) SLE78CLX1440P A11, the card operating system TCOS FlexCert 2.0 Release 1/SLE78CLX1440P, and an application for creating qualified signatures. The product is a health professional card for German healthcare telematics, i.e. in addition to the dedicated application for creating qualified electronic signatures, further applications are stored on the card in accordance with Gematik requirements for the health professional card file system. SRC certifies that the product “TCOS Health Professional Card Version 2.0 Release 1/SLE78CLX1440P” of T-Systems International GmbH meets the requirements pursuant to Section 17 (1) and (3) no. 1 SigG as well as Section 15 (1) and (4), Annex 1, I, 1.1 to 1.3 SigV. Due to the transitional measures pursuant to Regulation (EU) No 910/2014, Article 51(1), the product is considered a QSCD under the said Regulation.