Gemalto Achieves Major Breakthrough in Security Technology with Java CardTM Highest Level of Certification
October 2007 by Marc Jacob
Gemalto announces that its implementation of Java CardTM technology has been Common Criteria certified EAL4 using formal assurances from the EAL7 level, the highest level of certification possible. This is the world’s first Common Criteria certificate of a smart card involving formal assurances from the EAL7 level. It provides high confidence in open multi-application cards as it ensures that each embedded application is completely and securely isolated from the others and that this security process has been mathematically proven. Gemalto received the certification end of September 2007.
The EAL levels, which range from 0 to 7, offer a simple scale for comparative measurement to the consumer. Internationally designed and recognized "Common Criteria" security certificates using the EAL scale enable to verify that products meet the security claims made by vendors. The EAL7 formal assurances in this certification provide the highest measure to verify the design and implementation of the security mechanisms of the Java Card System of the smart card. This achievement demonstrates that Gemalto uses the most advanced means of designing and testing the security of its Java Card products. The certification also conforms to Sun Microsystems’ Java Card System Protection Profile.
The certification was performed by the French DCSSI (Central Administration for Information Systems Security - Direction Centrale de la Sécurité des Systèmes d’Information). The measures of the DCSSI are focused on the functional and assurance requirements of a security product. Functional requirements define the desired security of the product as offered by the security vendor, and assurance requirements confirm the effectiveness and implementation of the security mechanisms.
This certificate received by Gemalto is recognized internationally, through the SOG-IS and CCRA international agreements.
All trademarks are properties of their respective owners.
Related articles:
- Gemalto And Far EasTone Telecommunications Co. Ltd. Partner To Start Asia’s First ‘Pay-Buy Mobile’ Trial
- Gemalto Provides Web Services to SEB’s German Affiliate for Designing Personalized Credit Cards
- Gemalto and Devon IT Provide Security for Healthcare Organizations
- Gemalto Attains Gold Certified Partner Status in Microsoft Partner Program
- Gemalto Receives “Best Software” Sesames Award with “Sconnect“
- Gemalto selected to provide Colombia’s first SIM-based mobile banking service
- Gemalto’s Personalization Center in Poland Achieves MasterCard® and Visa Accreditations