EAL6 Certification at eID Production Site Increases Manufacturing Flexibility

SMARTRAC is the first company in the world to obtain EAL6 certification for OS loading onto flash memory chips. This covers all types of chip, meaning that many SMARTRAC customers will benefit from significantly increased manufacturing flexibility.

 

SMARTRAC is the first company in the world with EAL6 certification for OS loading onto flash memory chips, having obtained Common Criteria EAL6 certification for its Thailand production site. The certification allows for the qualified handling of EAL6-certified products supplied by chip and chip operating system providers, meaning that customers will benefit from significantly increased manufacturing flexibility.

By being certified to do this, SMARTRAC can even better meet customer expectations for faster delivery times, since it reduces the time-consuming logistical step of getting chips packaged into modules by the chip suppliers. Hence, SMARTRAC now has the flexibility required to supply small, medium and high volumes at short notice.


The certification covers all types of flash memory chip, which means that SMARTRAC can better service not only the Electronic Identity (eID) sector, but also EMVCo applications (a technical standard for smart payment cards originally devised by Europay, MasterCard and Visa); DDA (Dynamic Data Authentication) Payment; and Transport applications.


Not all RFID chips are flash memory chips, which have an OS loaded into their flash memory. The vast majority of chips feature “native” OS, which means that the OS is loaded at the wafer level, while others feature an OS that is loaded at the ROM level. Flash memory is growing in popularity in the industry however, since it allows for easy OS loading and upgrading.


Serving Customers Better with Certified OS Flash Loading


“As the global leader in high-quality and high-security RFID inlays for identity documents, we are delighted to obtain EAL6 certification. With this new certification we are allowed to include OS loading onto flash memory chips, and uniquely positioned to serve our customers better than anyone else”, says Ralf Henn, Senior Vice President, Secure ID & Transactions Business Division at SMARTRAC.

 

SMARTRAC was one of the first inlay manufacturers to achieve the level of security certification that silicon chip manufacturers and chip operating system providers have set as a standard for their recent products. As of today, SMARTRAC is the only company to have received EAL6 certification for OS loading onto flash memory chips, which must follow a qualified secure handling procedure.


The “Common Criteria for Information Technology Security Evaluation” (abbreviated as Common Criteria or CC) is an international standard (ISO/IEC 15408) for computer security certification. The Evaluation Assurance Level (EAL1 through EAL7) of an IT product or system is a numerical grade assigned following the completion of a Common Criteria security evaluation.


Compared to EAL5, EAL6 certification requires an enhanced secure IT infrastructure, including firewall, virtual private network (VPN) and intrusion detection system/intrusion protection system (IDS/IPS), as well as excellent perimeter security.

 

EAL certifications for inlay production processes are granted by several certification bodies, for instance by the French “Agence nationale de la sécurité des systèmes d'information” (ANSSI) or the German “Bundesamt für Sicherheit in der Informationstechnik” (BSI). To see SMARTRAC’s official certification, please go to the BSI website.