{"_id": "1034aed9a106ac96", "_type": "sec_certs.sample.eucc.EUCCCertificate", "dgst": "1034aed9a106ac96", "cert_id": "EUCC-3090-2026-0049", "category": "SMARTCARDS AND SIMILAR DEVICES", "name": "CombICAO Applet v3 in BAC and CA configuration on ID-One Cosmo X", "status": "active", "manufacturer": "IN Smart Identity", "scheme": "FR", "security_level": {"_type": "Set", "elements": ["EAL4"]}, "not_valid_before": "2026-06-01", "not_valid_after": "2031-06-01", "report_link": "https://certification.enisa.europa.eu/document/download/79694d61-a83e-4233-8d87-7e8da9c3e9b2_en?filename=EUCC-3090-2026-49-rapport.pdf", "st_link": "https://certification.enisa.europa.eu/document/download/043b5582-e62e-4fbc-b3b5-f01010323620_en?filename=EUCC-3090-2026-49-cible.pdf", "cert_link": "https://certification.enisa.europa.eu/document/download/92611a26-e9f1-4031-aea3-5acd5caeb82f_en?filename=EUCC-3090-2026-49-certificat.pdf", "manufacturer_web": "https://ingroupe.com/product/combicao/", "protection_profile_links": null, "state": {"_type": "sec_certs.sample.cc_eucc_common.InternalState", "report": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "ee705a975a33d2d707f9d786be0feaffac17c10d602d33d03eadc5d69ebbf163", "txt_hash": "106f1278448be85e0dad5a43bd7ab7e6345d40aa6e622aceeefbad7192491596", "json_hash": null}, "st": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "04ac7d305a968b9b2a80b496b6a0c6b96dd5739ad61e1db6db237cdaf3cdf01a", "txt_hash": "632fa0e43365a7e7bd95b510dc5eb511b611a7f6dd809f3aa0c1ba782d01ee90", "json_hash": null}, "cert": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": false, "convert_ok": false, "extract_ok": false, "source_hash": null, "txt_hash": null, "json_hash": null}}, "pdf_data": {"_type": "sec_certs.sample.cc_eucc_common.PdfData", "report_metadata": {"pdf_file_size_bytes": 914548, "pdf_is_encrypted": false, "pdf_number_of_pages": 16, "/Creator": "Acrobat PDFMaker 26 pour Word", "/Producer": "Docusign DMv10", "/CreationDate": "D:20260601110911+02'00'", "/ModDate": "D:20260602071244+00'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://ingroupe.com/psirt/", "https://ingroupe.com/product/combicao/", "https://www.cyber.gouv.fr/", "http://www.cofrac.fr/", "http://www.commoncriteriaportal.org/", "https://cyber.gouv.fr/cybersecurity-act.", "mailto:psirt@ingroupe.com", "mailto:certification@ssi.gouv.fr", "https://www.ssi.gouv.fr/"]}}, "st_metadata": {"pdf_file_size_bytes": 2069968, "pdf_is_encrypted": false, "pdf_number_of_pages": 149, "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_Enabled": "True", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_SiteId": "7694d41c-5504-43d9-9e40-cb254ad755ec", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_Owner": "g509704@mph.morpho.com", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_SetDate": "2021-09-07T06:44:58.7589612Z", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_Name": "Business Restricted", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_Application": "Microsoft Azure Information Protection", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_ActionId": "e8deb8a0-7593-4d04-a3aa-b8fab1be9600", "/MSIP_Label_4ac506cd-83f6-47e0-9e0b-d93776b6479c_Extended_MSFT_Method": "Manual", "/MSIP_Label_9d900cae-8562-48ba-b9f0-7d683a8ec459_Enabled": "true", "/MSIP_Label_9d900cae-8562-48ba-b9f0-7d683a8ec459_Method": "Privileged", "/MSIP_Label_9d900cae-8562-48ba-b9f0-7d683a8ec459_SiteId": "76eb9ac3-0a27-417b-9e7d-e8eb81f82b62", "/MSIP_Label_9d900cae-8562-48ba-b9f0-7d683a8ec459_ContentBits": "0", "/Title": "Title", "/Author": "KUMAR Prem", "/Creator": "Microsoft\u00ae Word pour Microsoft\u00a0365", "/CreationDate": "D:20260130160650+01'00'", "/ModDate": "D:20260130160650+01'00'", "/Producer": "Microsoft\u00ae Word pour Microsoft\u00a0365", "pdf_hyperlinks": {"_type": "Set", "elements": []}}, "cert_metadata": null, "report_frontpage": {"FR": {}}, "st_frontpage": null, "cert_frontpage": null, "report_keywords": {"cc_cert_id": {"FR": {"ANSSI-CC-2023/06-R01": 1, "EUCC-3090-2026-49": 4}}, "cc_protection_profile_id": {"BSI": {"BSI-CC-PP-0055-2009": 1, "BSI-CC-PP- 0055-2009": 1}}, "cc_security_level": {"EAL": {"EAL4": 1, "EAL2": 4}}, "cc_sar": {"ADV": {"ADV_FSP.5": 1, "ADV_INT.2": 1, "ADV_TDS.4": 1}, "ALC": {"ALC_DVS.2": 1, "ALC_CMS.5": 1, "ALC_TAT.2": 1, "ALC_FLR": 2}, "ATE": {"ATE_DPT.3": 1}, "AVA": {"AVA_VAN": 2}}, "cc_sfr": {}, "cc_claims": {}, "vendor": {}, "eval_facility": {"CESTI": {"CESTI": 5}, "CEA-LETI": {"CEA - LETI": 1}}, "symmetric_crypto": {"DES": {"DES": {"DES": 1}}}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {}, "crypto_scheme": {}, "crypto_protocol": {}, "randomness": {}, "cipher_mode": {}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {"FI": {"Physical Tampering": 1, "Malfunction": 1}}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"ISO": {"ISO/IEC 18045:2008": 1}, "ICAO": {"ICAO": 2}, "CC": {"CCMB-2017-04-001": 1, "CCMB-2017-04-004": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "st_keywords": {"cc_cert_id": {"FR": {"ANSSI-CC-2023/06-R01": 1}}, "cc_protection_profile_id": {"BSI": {"BSI-CC-PP-0055-2009": 2, "BSI-PP-0056": 1, "BSI-CC-PP0056-V2-": 1, "BSI-CC-PP-0084-2014": 1, "BSI-CC-PP-0068-V2-": 1, "BSI-CC-PP-0059-2009-MA-02": 1, "BSI-CC-PP-0075-2012-MA-01": 1, "BSI-CC-PP- 0071-2012-MA-01": 1, "BSI-CC-PP-0072-2012-": 1, "BSI-CC-PP-0076-2013-MA-": 1}, "other": {"PP-SSCD2": 2, "PP-SSCD3": 2, "PP-SSCD4": 2, "PP-SSCD5": 2, "PP-SSCD6": 2}}, "cc_security_level": {"EAL": {"EAL4": 8, "EAL5": 6, "EAL4+": 6, "EAL5+": 12, "EAL4 augmented": 2}}, "cc_sar": {"ADV": {"ADV_FSP.5": 28, "ADV_INT.2": 13, "ADV_TDS.4": 29, "ADV_ARC": 1, "ADV_ARC.1": 15, "ADV_FSP": 1, "ADV_IMP": 1, "ADV_IMP.1": 15, "ADV_TDS": 1, "ADV_INT": 1, "ADV_FSP.1": 3, "ADV_TDS.1": 2, "ADV_TDS.3": 3, "ADV_FSP.2": 2, "ADV_FSP.4": 1}, "AGD": {"AGD_PRE": 9, "AGD_OPE": 8, "AGD_OPE.1": 15, "AGD_PRE.1": 11}, "ALC": {"ALC_CMS.5": 13, "ALC_DVS.2": 22, "ALC_TAT.2": 18, "ALC_CMC": 1, "ALC_CMC.4": 16, "ALC_CMS": 1, "ALC_DEL": 1, "ALC_DEL.1": 6, "ALC_DVS": 1, "ALC_LCD": 1, "ALC_LCD.1": 9, "ALC_TAT": 1, "ALC_TAT.1": 2, "ALC_CMS.1": 1, "ALC_DVS.1": 1}, "ATE": {"ATE_DPT.3": 13, "ATE_COV": 1, "ATE_COV.2": 8, "ATE_DPT": 1, "ATE_FUN": 1, "ATE_FUN.1": 14, "ATE_IND": 1, "ATE_IND.2": 7, "ATE_COV.1": 2, "ATE_DPT.1": 1}, "AVA": {"AVA_VAN.3": 9, "AVA_VAN": 7, "AVA_VAN.5": 6}, "APE": {"APE_SRE": 1}, "ASE": {"ASE_CCL": 1, "ASE_CCL.1": 15, "ASE_ECD": 1, "ASE_ECD.1": 14, "ASE_INT": 1, "ASE_INT.1": 17, "ASE_OBJ": 1, "ASE_OBJ.2": 13, "ASE_REQ": 1, "ASE_REQ.2": 15, "ASE_SPD": 1, "ASE_SPD.1": 8, "ASE_APD.1": 1, "ASE_TSS": 1, "ASE_TSS.1": 6, "ASE_REQ.1": 2}}, "cc_sfr": {"FAU": {"FAU_SAS": 6, "FAU_SAS.1": 15, "FAU_GEN": 2, "FAU_SAS.1.1": 1}, "FCS": {"FCS_RND": 2, "FCS_RND.1": 34, "FCS_CKM": 56, "FCS_COP": 175, "FCS_RND.1.1": 2, "FCS_CKM.1": 20, "FCS_CKM.4": 50, "FCS_CKM.4.1": 1, "FCS_COP.1": 15, "FCS_CKM.2": 3}, "FDP": {"FDP_ACC": 38, "FDP_ACF": 39, "FDP_UCT": 27, "FDP_UIT": 27, "FDP_DAU": 12, "FDP_ITC": 18, "FDP_ACC.1": 10, "FDP_ACF.1": 13, "FDP_UCT.1": 3, "FDP_UIT.1": 6, "FDP_DAU.1": 2, "FDP_ITC.1": 18, "FDP_ITC.2": 15, "FDP_IFC.1": 5}, "FIA": {"FIA_API": 14, "FIA_API.1": 7, "FIA_UAU": 78, "FIA_AFL": 26, "FIA_API.1.1": 1, "FIA_UID.1": 15, "FIA_UID.1.1": 1, "FIA_UID.1.2": 1, "FIA_UAU.1": 17, "FIA_UAU.1.1": 1, "FIA_UAU.1.2": 1, "FIA_UAU.4": 20, "FIA_UAU.4.1": 1, "FIA_UAU.5": 7, "FIA_UAU.6": 4, "FIA_AFL.1": 4}, "FMT": {"FMT_LIM": 4, "FMT_LIM.1": 21, "FMT_LIM.2": 19, "FMT_MOF": 21, "FMT_MTD": 139, "FMT_MTD.1": 14, "FMT_LIM.1.1": 2, "FMT_LIM.2.1": 2, "FMT_SMF.1": 48, "FMT_SMF.1.1": 1, "FMT_SMR.1": 49, "FMT_SMR.1.1": 1, "FMT_SMR.1.2": 1, "FMT_MOF.1": 3, "FMT_MSA.3": 9, "FMT_MSA.1": 3}, "FPT": {"FPT_EMS": 5, "FPT_EMS.1": 25, "FPT_EMS.1.1": 3, "FPT_EMS.1.2": 3, "FPT_FLS.1": 17, "FPT_FLS.1.1": 1, "FPT_TST.1": 12, "FPT_TST.1.1": 1, "FPT_TST.1.2": 1, "FPT_TST.1.3": 1, "FPT_PHP.3": 17, "FPT_PHP.3.1": 1}, "FTP": {"FTP_ITC": 14, "FTP_ITC.1": 15, "FTP_TRP.1": 12}}, "cc_claims": {}, "vendor": {"Infineon": {"Infineon": 4}, "Idemia": {"IDEMIA": 104}}, "eval_facility": {"CEA-LETI": {"CEA-LETI": 1}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 15, "AES128": 3, "AES192": 3, "AES256": 3}}, "DES": {"DES": {"DES": 9}, "3DES": {"Triple-DES": 11, "3DES": 6, "TDES": 1}}, "constructions": {"MAC": {"KMAC": 2, "CMAC": 3}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 2}, "ECDSA": {"ECDSA": 2}}, "FF": {"DH": {"Diffie-Hellman": 5, "DH": 1}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA1": 4, "SHA-1": 5}, "SHA2": {"SHA256": 2, "SHA384": 2, "SHA512": 2, "SHA-256": 2, "SHA2": 2}}}, "crypto_scheme": {"MAC": {"MAC": 9}, "KA": {"Key agreement": 1}}, "crypto_protocol": {"PACE": {"PACE": 20}}, "randomness": {}, "cipher_mode": {"CBC": {"CBC": 9}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {"SCA": {"physical probing": 3, "DPA": 2, "SPA": 1, "timing attacks": 1}, "FI": {"Physical Tampering": 6, "physical tampering": 2, "Physical tampering": 1, "Malfunction": 7, "malfunction": 6, "fault injection": 1}, "other": {"reverse engineering": 1}}, "technical_report_id": {}, "device_model": {}, "tee_name": {"IBM": {"SSC": 1}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {"EF": {"EF.DG1": 29, "EF.DG13": 3, "EF.DG16": 30, "EF.DG2": 8, "EF.DG3": 7, "EF.DG4": 7, "EF.DG5": 8, "EF.DG14": 4, "EF.DG15": 1, "EF.COM": 13, "EF.SOD": 12}}, "standard_id": {"FIPS": {"FIPS 180-4": 1, "FIPS 186-3": 1, "FIPS 197": 1, "FIPS PUB 197": 1, "FIPS 46-3": 1}, "PKCS": {"PKCS#3": 2}, "RFC": {"RFC3369": 1}, "ISO": {"ISO/IEC 14443": 6, "ISO/IEC 7816-4": 1, "ISO/IEC 18013": 2, "ISO/IEC 9797-1": 1, "ISO/IEC 11770-2": 1, "ISO/IEC 11770-3": 1, "ISO/IEC 9796-2": 1}, "ICAO": {"ICAO": 17}, "SCP": {"SCP02": 1, "SCP03": 1}, "CC": {"CCMB-2017-04-001": 1, "CCMB-2017-04-002": 1, "CCMB-2017-04-003": 1, "CCMB-2017-04-004": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "cert_keywords": null, "report_filename": "79694d61-a83e-4233-8d87-7e8da9c3e9b2_en", "st_filename": "043b5582-e62e-4fbc-b3b5-f01010323620_en", "cert_filename": null}, "heuristics": {"_type": "sec_certs.sample.cc_eucc_common.Heuristics", "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "cert_lab": null, "cert_id": "EUCC-3090-2026-49", "prev_certificates": null, "next_certificates": null, "st_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "report_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "annotated_references": null, "extracted_sars": {"_type": "Set", "elements": [{"_type": "sec_certs.sample.sar.SAR", "family": "ASE_INT", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_CCL", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "AGD_OPE", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_FUN", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_DPT", "level": 3}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_COV", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_TAT", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_ARC", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_FSP", "level": 5}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_DVS", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_DEL", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_APD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_CMC", "level": 4}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_LCD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "AVA_VAN", "level": 5}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_IMP", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_TDS", "level": 4}, {"_type": "sec_certs.sample.sar.SAR", "family": "ALC_CMS", "level": 5}, {"_type": "sec_certs.sample.sar.SAR", "family": "ATE_IND", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_OBJ", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_SPD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_REQ", "level": 2}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_ECD", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "AGD_PRE", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ASE_TSS", "level": 1}, {"_type": "sec_certs.sample.sar.SAR", "family": "ADV_INT", "level": 2}]}, "direct_transitive_cves": null, "indirect_transitive_cves": null, "scheme_data": null, "protection_profiles": null, "eal": "EAL4"}, "other_metadata": {"_type": "sec_certs.sample.eucc.EUCCCertificate.EnisaMetadata", "certificate_id": "EUCC-3090-2026-0049", "product_name": "CombICAO Applet v3 in BAC and CA configuration on ID-One Cosmo X", "product_type": "Smartcards and similar devices", "product_version": "Code SAAAAR : 20 37 42 FF", "product_description": "The product evaluated is a smart card that can be used in both contact and contactless modes. It implements electronic travel document functions in accordance with the specifications of the International Civil Aviation Organization (ICAO). This product is designed to verify the authenticity of the travel document and identify its bearer during border control using an inspection system. This microcontroller and its embedded software are designed to be inserted into the cover of traditional passports, into an eCover, or into an eDatapage. The final product can take various forms, such as a card or a module.", "holder_name": "IN Smart Identity", "holder_address": "2 place Samuel de Champlain, 92400 Courbevoie", "holder_contact": null, "holder_website": "https://ingroupe.com/product/combicao/", "certification_body": "ANSSI", "nando_id": "3090", "certification_body_address": "Tour Mercure 31 Quai de Grenelle, 75015 Paris", "certification_body_contact": "certification@ssi.gouv.fr Phone: +33 (0)1 71 75 82 82", "itsef": "CEA-LETI", "responsible_ncca": "Agence nationale de la s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information", "scheme": "(UE) 2024/482 - EUCC", "report_reference": "EUCC-3090-2026-49 Certification Report", "assurance_level": "High", "cc_version": "CC 3.1 Revision 5", "cem_version": "CEM 3.1 Revision 5", "ava_van_level": "5", "package": {"EAL4": ["ALC_DVS.2", "ADV_FSP.5", "ADV_INT.2", "ADV_TDS.4", "ALC_CMS.5", "ALC_TAT.2", "ATE_DPT.3"]}, "protection_profile": "[PP-BAC] : BSI-CC-PP-0055-2009", "issuance_year": "2026", "issuance_month": "6", "issuance_date_full": "01/06/2026", "certificate_yearly_number": "EUCC-3090-2026-000049-I-00", "modification_or_reassurance": null, "validity_period_years": "5 years"}}