Sagem Orga ZKASECCOS Sig v2.6.4 安全目标文档

需积分: 10 175 浏览量更新于2024-08-01 收藏 521KB PDF 举报

"ZKA SECCOS Sig v2.6.4是Sagem Orga GmbH公司的一款智能卡产品，该文档是其按照Common Criteria Version 2.3标准进行安全评估的安全目标（Security Target）。该评估关注的是TOE（Target of Evaluation）的安全功能和强度，特别是SOF-high级别的安全性。文档涵盖了TOE的描述、安全目标、假设、威胁、安全功能以及保证级别等多个方面。" 在IT行业中，"ZKA SECCOS Sig v2.6.4" 是一个特定的产品名称，它是一款智能卡解决方案。智能卡是一种集成有微处理器芯片的卡片，常用于存储敏感信息，如个人身份验证、金融交易或访问控制等。在安全领域，这种产品必须经过严格的安全认证，以确保用户数据的保护。 Common Criteria是国际上广泛认可的信息技术产品安全评估标准，它定义了多个评估保证级别（Evaluation Assurance Level, EAL），如EAL4+，以衡量产品的安全设计和实现。在这个案例中，ZKA SECCOSSig v2.6.4被评估为CCEAL4+，这意味着它满足了相当高的安全标准，并且在TOE的安全功能上达到了SOF-high的强度水平。文档中的关键词，如"Target of Evaluation (TOE)"，指的是被评估的对象，即ZKA SECCOS Sig v2.6.4智能卡产品。"Dedicated Software"和"Embedded Software"指的是专门为智能卡设计的软件，这部分软件是卡功能的核心，负责处理卡上的数据和操作。"Basic Software"可能是指智能卡操作系统，"Application Software"则可能指附加的应用程序。 "Security Objectives"、"Assumptions"和"Threats"是评估过程的关键部分，它们定义了产品应达到的安全目标，考虑了可能的安全风险和潜在威胁。"TOE Security Function (TSF)"和"TOE Security Enforcing Function (SEF)"是产品中实现的安全机制，用于保护数据和防止攻击。"Level of Assurance"和"Strength of Functions (SOF)"分别代表了安全保证的级别和安全功能的强度。 "Security Functional Requirements (SFR)"和"Security Assurance Requirements (SAR)"则是产品必须满足的具体安全功能和保证要求。"Security Function Policy (SFP)"则可能指的是指导如何实施和管理这些安全功能的策略。 "ZKA SECCOS Sig v2.6.4"的安全评估文档详细列出了产品在安全方面的设计和实现，包括其面对的威胁、采取的防护措施以及达到的安全标准，为用户和组织提供了全面的保障。文档的更新和维护由Karsten Klohs在Sagem ORGA GmbH负责。

ZKA SECCOS Sig v2.6.4 16 / 111

ST-Lite 1BTOE Description

3SECCOS.CSL.0004 V1.05 02 Juli 2009

Sagem ORGA GmbH Karsten Klohs

We conclude from this, that the following security analysis of the SECCOS operating

system platform on the AT90SC28872RCU is equally valid for revision D, E and G of

the integrated circuit.

2.1.2 TOE´s Signature Application

The TOE is a Secure Signature-Creation Device (SSCD Type 3) according to the EU Direc-

tive /ECDir/ on electronic signatures.

The TOE as SSCD is configured software and hardware used to implement the Signature-

Creation Data (SCD) and to guarantee for the secure usage of the SCD.

The TOE provides the following functions necessary for devices involved in creating qualified

electronic signatures:

1. Generation of the SCD and the correspondent Signature-Verification Data (SVD)

2. Creation of qualified electronic signatures

a. after allowing for the data to be signed (DTBS) to be displayed correctly where

the display function has to be provided by an appropriate environment

b. using appropriate hash functions that are, according to /ALGCAT/, agreed as

suitable for qualified electronic signatures

c. after appropriate authentication of the signatory by the TOE

d. using appropriate cryptographic signature functions that employ appropriate cryp-

tographic parameters agreed as suitable according to /ALGCAT/.

The TOE includes an automatic preceding destruction of the old SCD prior to the generation

of the new SCD/SVD pair.

The TOE implements all IT security functionality which is necessary to ensure the secrecy of

the SCD. To prevent the unauthorised usage of the SCD the TOE provides user authentica-

tion and access control. The user authenticates himself by supplying the verification authen-

tication data (VAD) to the TOE which compares the VAD against the reference authentication

data (RAD) securely stored inside the TOE. The TOE implements IT measures to support a

trusted path to a trusted human interface device that can optionally be connected via a

trusted channel with the TOE.

The TOE does not implement the Signature-Creation Application (SCA) which presents the

data to be signed (DTBS) to the signatory and prepares the DTBS-representation the signa-

tory wishes to sign for performing the cryptographic function of the signature. This ST as-

sumes the SCA as environment of the TOE.

The TOE protects the SCD during the whole life-cycle as to be solely used in the signature-

creation process by the legitimate signatory. The TOE as SSCD of Type 3 generates the

signatory´s SCD oncard and serves for a secure storage of this data. The initialisation and

personalisation of the TOE for the signatory´s use in the sense of the Protection Profile /PP

SSCD Type 3/ include:

1. Generation of the SCD/SVD pair

2. Personalisation for the signatory by means of the signatory’s verification authentica-

tion data (VAD).

ZKA SECCOS Sig v2.6.4 18 / 111

ST-Lite 1BTOE Description

3SECCOS.CSL.0004 V1.05 02 Juli 2009

Sagem ORGA GmbH Karsten Klohs

TOE

component

Description / Additional Information Type Transfer Form

Note:

The TOE will be delivered from Sagem Orga GmbH as not-initialised or initialised product (module /

smartcard). To finalize the TOE as not-initialised product, the Initialisation Table developed by

Sagem Orga GmbH must be loaded during the initialisation phase by the Initialiser (Sagem Orga

GmbH or other initialisation facility).

TOE

TOE HW + SW

part

TOE consisting of

- ATMEL AT90SC28872RCU, whereat the

ROM mask consisting of the Cryptographic

Toolbox 00.03.10.00 and the Smartcard

Embedded Software (SECCOS operating

system) provided by Sagem Orga GmbH is

already implemented

- EEPROM Initialisation Table (provided by

Sagem Orga GmbH)

HW+SW Delivery of not-

initialised / initialised

modules or smart-

cards

Delivery of Initialisa-

tion Tables in elec-

tronic form (if appli-

cable)

Hint: The delivered

Initialisation Tables

have to be finalised

by the Verlage der

Kreditwirtschaft

(insertion of addi-

tional verification

data).

TOE Documentation

Administrator

Guide / Smart-

card Initialisation

Administrator guidance for the Initialiser for the

smartcard initialisation of the TOE (“System

Administrator Guidance for the Initialiser of the

Smartcard Product ZKA SECCOS Sig v2.6.1”,

V1.00)

DOC Document in paper /

electronic form

Administrator

Guide / Smart-

card Personalisa-

tion

Administrator guidance for the Personaliser for

the smartcard personalisation of the TOE (“Sys-

tem Administrator Guidance for the Personal-

iser of the Smartcard Product ZKA SECCOS

Sig v2.6.1”, V1.00)

DOC Document in paper /

electronic form

Identification

Data Sheet

Data Sheet with information on the actual iden-

tification data and configuration of the TOE

delivered to the customer (in particular informa-

tion on the relevant Initialisation Table, “Data

Sheet - ZKA SECCOS Sig v2.6.1” (customer

specific) based on form “Data Sheet - ZKA

SECCOS Sig v2.6.1”, V1.00)

DOC Document in paper /

electronic form

Document „Kon-

zept zur Perso-

nalisierung von

ZKA-Chipkarten

(insbesondere

Specification describing Initialisation and Per-

sonalisation processes, refer to /SECCOS

Perso/

DOC Document in paper /

electronic form

剩余110页未读，继续阅读

nalzoom

粉丝: 0
资源: 1

Sagem Orga ZKASECCOS Sig v2.6.4 安全目标文档

手机测试用的手机签名文件。.sig文件的下载和使用方法。

基于lora射频通信的无线PLC在物联网远程控制场合中的应用

微信公众号留言小程序(v2.0.1).rar

ZKA-LORA在物联网远程控制中的应用与优势

知攻善防-应急响应靶机-web2.z18

知攻善防-应急响应靶机-web2.z09

白色简洁风格的影视众筹平台整站网站源码下载.zip

HTTP请求流程深入解析与性能优化技术指南

白色简洁风格的电话通讯公司模板下载.zip

白色简洁风格的日历当日事件提醒整站网站源码下载.zip

最新资源