PREMIER MINISTRE Secrétariat général de la défense et de la sécurité nationale Agence nationale de la sécurité des systèmes d'information Maintenance Report ANSSI-CC-PP 2008/05- M01 Protection Profile "Electronic Signature Creation Application" Reference Certificate : DCSSI-PP 2008/05 Courtesy Translation Paris, 21st March 2011 Protection Profile "Electronic Signature Cration Application" Maintenance Report ANSSI-CC-MAI/F/02.002 Page 2 sur 3 References a) Assurance continuity procedure MAI/P/01. b) Protection profile– Electronic Signature Creation Application, réf PP-ACSE-CCv3.1, version 1.6, 17 July 2008. c) Certification report DCSSI-PP 2008/05 for the protection profile « Electronic Signature Creation Application », 8 August 2008, ANSSI d) [SOG-IS] Mutual Recognition Agreement of Information Technology Security Evaluation Certificates, version 3.0, 8 January 2010, Management Committee e) [CC RA] Arrangement on the Recognition of Common Criteria certificates in the field of information Technology Security, May 2000. Identification of the maintained product The maintained protection profile (reference b) is the protection profile « Electronic Signature Creation Application » written by Trusted Labs SAS for ANSSI. Description of changes The protection profile updates state that the use of qualified electronic certificates is optional. Impacted deliverables [PP] Protection profile– Electronic Signature Creation Application, réf PP- ACSE-CCv3.1, version 1.7, 2 mars 2011 Conclusions The above listed changes are considered as having a minor impact. Recognition of the certificate This maintenance report is released in accordance with the document: « Assurance Continuity: CCRA Requirements, ref. CCIMB-2004-02-009, version 1.0, February 2004 ». European recognition (SOG-IS) The reference certificate was issued in accordance with the provisions of the SOG-IS agreement [SOG-IS]. Protection Profile "Electronic Signature Cration Application" Maintenance Report ANSSI-CC-MAI/F/02.002 Page 3 sur 3 The European Recognition Agreement made by SOG-IS in 2010 allows recognition from Signatory States of the agreement1 , of ITSEC and Common Criteria certificates. The European recognition is applicable up to ITSEC E3 Basic and CC EAL4 levels. The certificates that are recognized in the agreement scope are released with the following marking: International common criteria recognition (CCRA) The reference certificate was released in accordance with the provisions of the CCRA [CC RA]. The Common Criteria Recognition Arrangement allows the recognition, by signatory countries2 , of the Common Criteria certificates. The mutual recognition is applicable up to the assurance components of CC EAL4 level and also to ALC_FLR family. The certificates that are recognized in the agreement scope are released with the following marking: 1 The signatory countries of the SOG-IS agreement are: Finland, France, Germany, Italy, The Netherlands, Norway, Spain, Sweden and United Kingdom. 2 The signatory countries of the CCRA arrangement are: Australia, Austria, Canada, Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, India, Israel, Italy, Japan, Malaysia, Netherlands, New-Zealand, Norway, Pakistan, the Republic of Korea, Singapore, Spain, Sweden, Turkey, the United Kingdom and the United States of America.