CCCRA recognition for components
upto EAL 2 and ALC_FLR only

= \
(CI

CENTRO CRIPTOLOGICO NACIONAL

CERTIFICATE

CCN-CC-017/2017

SOMA-c007 Machine Readable Electronic Document EAC-PACE-AA
(SOMA-c007_2) version 2

Type of product Smartcard

Conformance of functionality PP Conformance functionality
Protection Profile BSI-CC-PP-0056-V2-2012
Conformance BSI-CC-PP-0068-V2-2011-MA-01
Evaluation Facility Applus Laboratories
Certification Report CCN-CC/2016-31/INF-2102

Pursuant to the authority vested in me under Act 11/2002 regulating the National Intelligence
Centre, and under Article 1 and Article 2.2.c of Royal Decree 421/2004 of March 12th regulating
the National Cryptologic Centre, | hereby:

Certify that the security of SOMA-c007 Machine Readable Electronic Document EAC-PACE-AA

(SOMA-c007_2) version 2, developed by HID Global / Arjo Systems, Viale Remo De Feo, 1 80022

Arzano (NA), ITALY, has been evaluated using the “Common Methodology for Information |
Technology Security Evaluation”, version 3.1 R4 and the “Common Criteria for Information

Technology Security Evaluation”, and it has met the requirements of its Security Target identified as

“SOMA-c007 Machine Readable Electronic Document Security Target ICAO Application EAC-PACE-

AA, Version 1.10, 2017-09-01”, for evaluation assurance level EAL5 + AVA_VAN.5 + ALC_DVS.2.

Madrid, October 10" 2017
Secretary of State Director

 

Félix Sanz Roldan

 

& This certificate, its scope and validity are subject to the terms, conditions and requirements specified in the
E AT | C “Reglamento de Evaluacién y Certificacion de la Seguridad de las T.I.C.” at PRE/2740/2007, September 19th.

ich "The above-mentioned Security Target and Certification Report are available at the National Cryptologic Centre.
 

 

The IT product identified in this certificate has been evaluated at an accredited and
licensed/approved evaluation facility using the Common Methodology for IT Security
Evaluation, version 3.1.R4 and CC Supporting Documents as listed in the Certification Report,
for conformance to the Common Criteria for IT Security Evaluation, version 3.1.R4. This
certificate applies only to the specific version and release of the product in its evaluated
configuration and in conjunction with the complete Certification Report. The evaluation has
been conducted in accordance with the provisions of the Spanish IT Security Evaluation and
Certification Scheme, PRE/2740/2007 September the 19th, and the conclusions of the
evaluation facility in the evaluation technical report are consistent with the evidence adduced.
This certificate is not an endorsement of the IT product by the Spanish Scheme or by any other
organisation that recognises or gives effect to this certificate, and no warranty of the IT
product by the Spanish Scheme or by any other organisation that recognises or gives effect to
this certificate, is either expressed or implied.