prEN 419111-1

SLOVENSKI STANDARD
01-april-2013
=DãþLWQLSURILOL]DXSRUDERSULREOLNRYDQMXLQSUHYHUMDQMXSRGSLVRYGHO
3UHGVWDYLWHY
Protection profiles for signature creation and verification application - Part 1: Introduction
Schutzprofile für eine Anwendung zum Erzeugen und Prüfen von Signaturen - Teil 1:
Einführung in die europäische Norm
Profils de protection pour application de création et de vérification de signature - Partie
1 : Introduction
Ta slovenski standard je istoveten z: prEN 419111-1
ICS:
35.240.15 Identifikacijske kartice in Identification cards and
sorodne naprave related devices
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD
DRAFT
NORME EUROPÉENNE
EUROPÄISCHE NORM
February 2013
ICS 35.240.15 Will supersede CWA 14170:2004
English Version
Protection profiles for signature creation and verification
application - Part 1: Introduction
Profils de protection pour application de création et de Schutzprofile für eine Anwendung zum Erzeugen und
vérification de signature - Partie 1 : Introduction Prüfen von Signaturen - Teil 1: Einführung in die
europäische Norm
This draft European Standard is submitted to CEN members for enquiry. It has been drawn up by the Technical Committee CEN/TC 224.

If this draft becomes a European Standard, CEN members are bound to comply with the CEN/CENELEC Internal Regulations which
stipulate the conditions for giving this European Standard the status of a national standard without any alteration.

This draft European Standard was established by CEN in three official versions (English, French, German). A version in any other language
made by translation under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC Management
Centre has the same status as the official versions.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.
Recipients of this draft are invited to submit, with their comments, notification of any relevant patent rights of which they are aware and to
provide supporting documentation.

Warning : This document is not a European Standard. It is distributed for review and comments. It is subject to change without notice and
shall not be referred to as a European Standard.

EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2013 CEN All rights of exploitation in any form and by any means reserved Ref. No. prEN 419111-1:2013: E
worldwide for CEN national Members.

Contents Page
Foreword .4
1 Scope .5
2 Normative references .5
3 Terms and definitions .5
4 Symbols and abbreviations . 10
5 Signature Creation Application . 11
5.1 General . 11
5.2 Conformance claim. 11
5.2.1 CC Conformance Claim . 11
5.2.2 PP Claim . 11
5.2.3 Package Claim . 11
5.2.4 Conformance Rationale . 11
5.2.5 Conformance Statement . 11
5.3 Overview of the target of evaluation . 11
5.3.1 TOE Type . 11
5.3.2 TOE Usage . 11
5.4 Subjects . 11
5.4.1 Signatory . 11
5.4.2 Administrator . 11
5.5 Objects . 12
5.5.1 Signature . 12
5.5.2 Signature Policy . 12
5.5.3 Certificate . 12
5.5.4 Document . 12
5.6 SCA environment . 14
5.6.1 Overview . 14
5.6.2 External entities . 14
5.6.3 Other Entities . 16
5.7 Operations . 16
5.7.1 Introduction . 16
5.7.2 TOE Operations . 17
5.7.3 TOE/TOE-environment operations . 20
5.7.4 TOE-environment operations . 21
6 Signature Verification Application . 22
6.1 General . 22
6.2 Conformance . 22
6.2.1 CC Conformance Claim . 22
6.2.2 PP Claim . 22
6.2.3 Package Claim . 22
6.2.4 Conformance Rationale . 22
6.2.5 Conformance Statement . 22
6.3 Overview of the target of evaluation . 22
6.3.1 TOE Type . 22
6.3.2 TOE Usage . 22
6.4 Subjects . 23
6.4.1 Verifier . 23
6.4.2 Administrator . 23
6.5 Objects . 23
6.5.1 Signature . 23
6.5.2 Signature Policy . 23
6.5.3 Certificate . 23
6.6 SVA environment . 24
6.6.1 Overview . 24
6.6.2 External entities . 24
6.6.3 Other Entities . 25
6.7 Operations . 26
6.7.1 Introduction . 26
6.7.2 TOE Operations . 26
6.7.3 TOE/TOE-environment operations . 30
Bibliography . 31
Index . 32

Figures
Figure 1 — SCA Environment . 14
Figure 2 — SCA features . 17
Figure 3 — SDO minimum content . 18
Figure 4 — Document processing main steps . 19
Figure 5 — SVA Environment. 24
Figure 6 — SVA Features . 26
Figure 7 — Signature validation in the SVA . 27

Foreword
This document (prEN 419111-1:2013) has been prepared by Technical Committee CEN/TC 224 “Personal
identification, electronic signature and cards and their related systems and operations”, the secretariat of
which is held by AFNOR.
This document is currently submitted to the CEN Enquiry.
This document, together with prEN 41911-2:2013 and prEN 419111-3:2013, will supersede CWA 14170:2004.
EN 419111 consists of the following parts under the general title "Protection profiles for signature creation and
verification application":
 Part 1: Introduction.
This part is an introduction to EN 419111;
 Part 2: Signature creation application – Core PP.
This part is a PP for the SCA, specifying only the core security functions;
 Part 3: Signature creation application – Po
...