Giesecke & Devrient awarded IT security common criteria certificate for SECCOS bank signature card
System meets criteria of the European Protection Profile for Secure Signature Creation Devices
Munich, May 14, 2004–The SECCOS multifunctional chip card operating system specified by the banking industry provides a secure platform for a wide range of new application areas in the payment sector. Besides the GeldKarte electronic purse function and EMV capability for national and international debit transactions, a juvenile protection feature complying with new German legislation is also integrated into the card’s functionality. SECCOS not only guarantees the essential security of the chip card, but also protects and authenticates e-mail communications and sensitive Internet-based transactions through its universally deployable digital signature function. Possible applications of digital signatures are e.g. in online banking or electronically conducted legal business. For its SECCOS chip card operating system, the German technical inspection agency TÜV Informationstechnik GmbH (TÜViT) has awarded the Giesecke & Devrient (G&D) technology group both the common criteria certificate for IT security evaluation and certification of the system’s compliance with the German Signature Act (SigG).
“This award also confirms that G&D is the first supplier of SECCOS bank signature cards to meet all of the European Protection Profile criteria for digital signature cards”, commented Michael Kuemmerle, head of the Electronic Payment division at G&D. The Protection Profile for Secure Signature Creation Devices, a European Commission standard, defines the criteria that technical system components must meet for generation of qualified electronic signatures. These include specific requirements for components generating signature keys and signature verification keys, as well as for secure storage of signature keys and creation of digital signatures. “In the context of an expanded Europe, electronic signature cards will become increasingly important instruments within the single internal market. This certification will enable us to meet growing demands”, said Michael Kuemmerle, describing the favorable effects of the award for future projects.
About Giesecke & Devrient:
Giesecke & Devrient (G&D), based in Munich, Germany, is an international technology group operating subsidiaries and joint ventures throughout the world. In fiscal 2002, the group employed approx. 6,400 people and generated a revenue of €1.09 billion.
Founded in Leipzig in 1852 as a printer of securities, G&D soon specialized in banknote production. In 1970 the company began developing solutions and complete systems for automatic currency processing. G&D is also a technology leader in smart card production and a solutions provider in a range of fields, including telecommunications, electronic payments, transportation, health, ID, and Internet security. More information is available on our Web site at http://www.gi-de.com.