CC EAL4+ Certificate for MTCOS PRO V2.2 SAC/PACE on SLE78CLX.

The German BSI (Bundesamt für Sicherheit in der Informationstechnik) also known as the Federal Office for Information Security, has issued new Common Criteria EAL4+ certificates for MTCOS Pro on Infineon's SLE78CLX high security controller series.

The product certification is registered under the references BSI-DSZ-CC-0850-2013 and BSI-DSZ-CC-0851-2013. The evaluation and certification process is based on the latest protection profile PP0056v2 with support of the SAC/PACE and EAC protocols used in the new e-ID, e-Residence Permits and e-Passport applications.

The Supplemental Access Control (SAC) also known under Password Authenticated Connection Establishment (PACE) protocol is an alternative to Basic Access Control (BAC) that offers advanced resistance against skimming and eavesdropping of the travel / ID document. SAC/PACE provides strong session keys independent of the input strings (e.g. MRZ or Card Access Number). The new protocol must be supported by travel / ID documents issued from countries within the Schengen area from end of 2014. SAC/PACE will first amend the BAC protocol for backwards compatibility reasons and replace it later. The International Civil Aviation Organization (ICAO) recommends the use of SAC/PACE for all their member states from the end of 2014.

The chip hardware used in this new product line is the SLE78CLX series (M7820), a dual-core, high security controller available with crypto co-processor in various memory configurations. It has been certified in Germany according to Common Criteria EAL5+. MTCOS V2.2 latest edition is extensively using the new feature set and reaches an unrivaled level of performance on this new platform.

New features supported by MTCOS V2.2 are AES cryptography, SAC/PACE, a wide range of eID and Government applications included in the OS, and up to factor three better performance compared to our previous versions.

With Common Criteria products are evaluated using strict standards that validate the product's security, design process, development environment, functionality, security handling, testing and documentation.

MaskTech's MTCOS V2.1 & V2.2 eID system on chip has Common Criteria certificates now on 5 different semiconductor platforms.