EN 419211-1:2014

SLOVENSKI STANDARD
01-december-2014
3URILO]DãþLWHVUHGVWYD]DYDUQRHOHNWURQVNRSRGSLVRYDQMHGHO3UHJOHG
Protection profiles for secure signature creation device - Part 1: Overview
Schutzprofile für Sichere Signaturerstellungseinheiten - Teil 1: Überblick
Profiles de protection pour dispositif sécurisé de signature électronique - Partie 1:
Présentation générale
Ta slovenski standard je istoveten z: EN 419211-1:2014
ICS:
03.160 Pravo. Uprava Law. Administration
35.040 Nabori znakov in kodiranje Character sets and
informacij information coding
35.100.05 9HþVORMQHXSRUDEQLãNH Multilayer applications
UHãLWYH
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD
EN 419211-1
NORME EUROPÉENNE
EUROPÄISCHE NORM
October 2014
ICS 35.240.15 Supersedes CWA 14169:2004
English Version
Protection profiles for secure signature creation device - Part 1:
Overview
Profils de protection pour dispositif sécurisé de création de Schutzprofile für sichere Signaturerstellungseinheiten - Teil
signature électronique - Partie 1: Présentation générale 1: Überblick
This European Standard was approved by CEN on 25 July 2014.

CEN members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this European
Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references concerning such national
standards may be obtained on application to the CEN-CENELEC Management Centre or to any CEN member.

This European Standard exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC Management Centre has the same
status as the official versions.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2014 CEN All rights of exploitation in any form and by any means reserved Ref. No. EN 419211-1:2014 E
worldwide for CEN national Members.

Contents Page
Foreword .3
Introduction .4
1 Scope .5
2 Normative references .5
3 Terminology .5
3.1 Legislative references .5
3.2 Technical terms.5
4 Abbreviated terms .8
5 Protection Profile Overview .8
6 Target of Evaluation .9
6.1 General .9
6.2 Functions of an SSCD . 10
6.3 TOE life cycle . 12
6.4 Operations of the TOE . 14
7 TOE definitions . 15
7.1 General . 15
7.2 TOE with key generation . 15
7.3 TOE with key import . 16
7.4 TOE with key generation and trusted channel to certificate generation application . 16
7.5 TOE with trusted channel to signature creation application . 16
Annex A (informative) Comparison with CWA 14169:2004, Annex C . 20
A.1 General . 20
A.2 Technical Differences . 20
Bibliography . 21

Foreword
This document (EN 419211-1:2014) has been prepared by Technical Committee CEN/TC 224 “Personal
identification, electronic signature and cards and their related systems and operations”, the secretariat of
which is held by AFNOR.
This European Standard shall be given the status of a national standard, either by publication of an identical
text or by endorsement, at the latest by April 2015 and conflicting national standards shall be withdrawn at the
latest by April 2015.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
This document supersedes CWA 14169:2004.
Significant changes between this edition and CWA 14169:2004 can be found in Annex A.
This document has been prepared under a mandate given to CEN by the European Commission and the
European Free Trade Association.
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the following
countries are bound to implement this European Standard: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech
Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece,
Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal,
Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom.
Introduction
This series of European Standards specifies Protection Profiles for Secure Signature Creation Devices and is
issued by the European Committee for Standardization (CEN) as an update of the Electronic Signatures (E-
SIGN) CEN workshop agreement (CWA) 14169:2004, Annex C on the protection profile secure signature
creation devices, “EAL 4+”.
This series of European Standards consists of the following parts:
— Part 1: Overview
— Part 2: Device with key generation
— Part 3: Device with key import
— Part 4: Extension for device with key generation and trusted communication with certificate generation
application
— Part 5: Extension for device with key generation and trusted communication with signature creation
application
— Part 6: Extension for device with key import and trusted communication with signature creation
application
Preparation of the documents in this series of European Standards as protection profiles follows the rules of
the Common Criteria version 3.1 ([2], [3] and [4]).
1 Scope
This European Standard:
— specifies terms used in specifying protection profiles for secure signature creation devices,
— specifies functional and operational requirements for secure signature creation devices,
— describes the targets of evaluation for these protection profiles.
2 Normative references
Not applicable.
3 Terminology
For the purposes of this document, the following terms and definitions apply.
3.1 Legislative references
This European Standard reflects the requirement of a European Directive in the technical terms of a protection
profile. The following terms are used in the text to reference this Directive:
3.1.1
the Directive
Directive 1999/93/EC of the European Parliament and of the Council of 13 December 1999 on “a Community
framework for electronic signatures” [1]
Note 1 to entry: References in this document to a specific article and paragraph of Directive 1999/93/EC are of the
form “(the Directive: n.m)”.
3.1.2
annex
one of the annexes, Annex I, Annex II or Annex III of the Directive
3.2 Technical terms
3.2.1
administrator
user who performs TOE initialization, TOE personalization, or other TOE administrative functions
3.2.2
advanced electronic signature
digital signature which meets specific requirements in the Directive: 2.2
Note 1 to entry: According to the Directive a digital signature qualifies as an advanced electronic signature if it:
— is uniquely linked to the signatory;
— is capable of identifying the signatory;
— is created using means that the signatory can maintain under their sole control; and
— is linked to the data to which it relates in such a manner that any subsequent change of the data are detectable.
3.2.3
authentication data
information used to verify the claimed identity of a user
3.2.4
certificate
digital signature used as electronic attestation binding signature verification data to a person confirming the
identity of that person as legitimate signer (the directive: 2.9)
3.2.5
certificate info
information associated with an SCD/SVD pair that may be stored in a secure signature creation device
Note 1 to entry: Certificate info may include:
— a signer's public key certificate, or
— one or more hash values of a signer's public key certificate together with an identifier of the hash function used to
compute the hash values, or
— a public key certificate as defined in X.509.
Note 2 to entry: Certificate info may contain information to allow the user to distinguish between several certificates.
3.2.6
certificate generation application
CGA
collection of application components that receive the SVD from the SSCD to generate a certificate obtaining
data to be included in the certificate and to create a digital signature of the certificate
3.2.7
certification service provider
CSP
entity that issues certificates or provides other services related to electronic signatures (the Directive: 2.11)
3.2.8
data to be signed
DTBS
all of the electronic data to be signed including a user message and signature attributes
3.2.9
data to be signed or its unique representation
DTBS/R
data received by a secure signature creation device as input in a single signature creation operation
Note 1 to entry: Examples of DTBS/R are:
— a hash value of the data to be signed (DTBS), or
— an intermediate hash value of a first part of the DTBS complemented with a remaining part of the DTBS, or
— the DTBS.
3.2.10
legitimate user
user of a secure signature creation device who gains possession of it from an SSCD-provisioning service
provider and who can be authenticated by the SSCD as its signatory
3.2.11
qualified certificate
public key certificate that meets the requirements laid down in Annex I and that is provided by a CSP that
fulfils the requirements laid down in Annex II (the Directive: 2.10)
3.2.12
qualified electronic signature
an advanced electronic signature which is based on a qualified certificate and which is created by an SSCD
3.2.13
reference authentication data
RAD
data persistently stored by the TOE for authentication of the signatory
3.2.14
secure signature creation device
SSCD
a signature-creation device which meets the requirements laid down in Annex III
Note 1 to entry: An SSCD may be evaluated according to the security target conforming to a PP as defined in the
series of European Standards.
3.2.15
signatory
a person who holds (and is a legitimate user) of an SSCD and acts either on their own behalf or on behalf of
the natural or legal person or entity they represent
3.2.16
signature creation application
SCA
application complementing an SSCD with a user interface with the purpose to create an electronic signature
3.2.17
signature creation data
SCD
unique data, such as codes or private cryptographic keys, which are used by the signatory to create an
electronic signature
Note 1 to entry: For the PPs of this standard the SCD is held in the SSCD.
3.2.18
signature creation system
SCS
complete system that creates an electronic signature consisting of an SCA and an SSCD
3.2.19
signature verification data
SVD
data, such as codes or public cryptographic keys, which are used for the purpose of verifying an electronic
signature
3.2.20
SSCD-provisioning service
service to prepare and provide an SSCD to a subscriber and to
...