Protection Profile for Health Professional Card (HPC) - Heilberufsausweis (HBA), Version 1.02

Web information

Status archived
Valid from 14.12.2005
Valid until 29.01.2013
Scheme 🇩🇪 DE
Category ICs, Smart Cards and Smart Card-Related Devices and Systems
Security level EAL4+

Certification report

Certification report PDF TXT

Extracted keywords

Symmetric Algorithms
HPC, DES
Schemes
MAC

Security level
EAL 4, EAL4, EAL 4 augmented
Security Assurance Requirements (SAR)
ADV_IMP.2, AVA_MSU.3, AVA_VLA.4, APE_DES.1, APE_ENV.1, APE_INT.1, APE_OBJ.1, APE_REQ.1, APE_SRE.1
Security Functional Requirements (SFR)
FCS_CKM, FCS_CKM.4, FCS_COP, FCS_RND.1, FDP_ACC.2, FDP_ACF.1, FDP_RIP.1, FDP_SDI.2, FDP_UCT.1, FDP_UIT.1, FIA_AFL, FIA_ATD.1, FIA_UID.1, FIA_UAU.1, FIA_UAU.4, FMT_SMF.1, FMT_SMR.1, FMT_MTD, FMT_LIM.1, FMT_LIM.2, FPT_FLS.1, FPT_TST.1, FPT_PHP.3, FPT_RVM.1, FPT_SEP.1, FTP_ITC.1
Protection profiles
BSI-PP-0020-2005, BSI-PP-0020, BSI-PP-0005-2002T, BSI-PP-0006-2002T

Side-channel analysis
Physical Tampering
Certification process
Profile electronic Health Card (eHC) – elektronische Gesundheitskarte (eGK), T-Systems GEI GmbH (confidential document) [7] Common Criteria Protection Profile electronic Health Card (eHC) – elektronische

Standards
AIS 32, ISO/IEC 15408, X.509
Technical reports
BSI 7125, BSI 7148, BSI 7149

File metadata

Title PP Certification Report BSI-PP-0017-2005
Keywords BSI-PP-0017-2005
Author BSI
Creation date D:20051222132644+01'00'
Modification date D:20051222132834+01'00'
Pages 21
Creator Acrobat PDFMaker 7.0.5 für Word
Producer Acrobat Distiller 7.0.5 (Windows)

Protection Profile

Protection profile PDF TXT

Extracted keywords

Symmetric Algorithms
HPC, DES, Triple-DES, TDES
Hash functions
SHA-1, SHA-224
Schemes
MAC
Protocols
SSL
Block cipher modes
CBC

Security level
EAL4, EAL4 augmented
Security Assurance Requirements (SAR)
ADO_DEL, ADO_IGS, ADO_IGS.1, ADV_IMP.2, ADV_SPM.1, ADV_LLD.1, ADV_RCR.1, ADV_FSP.1, ADV_HLD.2, ADV_IMP.1, AGD_ADM.1, AGD_USR.1, ALC_TAT.1, AVA_MSU.3, AVA_VLA.4, ASE_PPC.1
Security Functional Requirements (SFR)
FCS_RND, FCS_CKM.1, FCS_CKM, FCS_CKM.2, FCS_COP.1, FCS_CKM.4, FCS_RND.1, FCS_CKM.4.1, FCS_COP, FCS_RND.1.1, FDP_ITC.1, FDP_ITC.2, FDP_ACC.2, FDP_ACF.1, FDP_UCT.1, FDP_ACC.1, FDP_ACC.2.1, FDP_ACF.1.1, FDP_ACF.1.2, FDP_ACF.1.3, FDP_ACF.1.4, FDP_RIP.1, FDP_RIP.1.1, FDP_SDI.2, FDP_SDI.1, FDP_SDI.2.1, FDP_SDI.2.2, FDP_UIT.1, FDP_UCT.1.1, FDP_IFC.1, FDP_UIT.1.1, FDP_UIT.1.2, FDP_ACF, FDP_ACC, FDP_UCT, FDP_UIT, FIA_UAU.4, FIA_AFL.1, FIA_AFL, FIA_UAU.1, FIA_ATD.1, FIA_ATD.1.1, FIA_UID.1, FIA_UID.1.1, FIA_UID.1.2, FIA_UAU.1.1, FIA_UAU.1.2, FIA_UAU.4.1, FMT_LIM, FMT_MSA.2, FMT_MTD.1, FMT_MSA.3, FMT_SMF.1, FMT_SMR.1, FMT_SMF.1.1, FMT_SMR.1.1, FMT_SMR.1.2, FMT_LIM.1, FMT_LIM.2, FMT_LIM.1.1, FMT_LIM.2.1, FMT_MTD, FMT_MSA.1, FPT_FLS.1, FPT_TST.1, FPT_PHP.3, FPT_RVM.1, FPT_SEP.1, FPT_FLS.1.1, FPT_PHP.3.1, FPT_TST.1.1, FPT_TST.1.2, FPT_TST.1.3, FPT_RVM.1.1, FPT_SEP.1.1, FPT_SEP.1.2, FPT_AMT.1, FTP_ITC.1, FTP_TRP.1, FTP_ITC.1.1, FTP_ITC.1.2, FTP_ITC.1.3
Protection profiles
BSI-PP-0020, BSI-PPP-0002, BSI-PP-0002, BSI-PP-0005-2002, BSI-PP-0006-2002, BSI-PP-****, BSI-PP-0005-2002T, BSI-PP-0006-2002T, BSI-PP-0002-2001
Evaluation facilities
SRC Security Research & Consulting

Side-channel analysis
physical probing, side channels, DPA, Physical Tampering, physical tampering, Physical tampering, Malfunction, malfunction, fault injection, reverse engineering, Bleichenbacher attack
Certification process
out of scope, of medical data. The protection of those data themselves against disclosure and manipulation is out of scope of the card, because they are not stored in the card. 9 The fact that a trusted channel was, FDP_ACF.1 101 Application note 29: Keys and other data for creation of qualified signatures are out of scope of this protection profile. 102 The TOE shall meet the requirement “Security attribute based access

Standards
FIPS 180-2, FIPS 46-3, FIPS PUB 46-3, PKCS #1, PKCS#1, ISO/IEC9796-2, ISO/IEC 7816-2, ISO/IEC 7816-4, X.509, x.509, CCIMB-99-031, CCIMB-99-032, CCIMB-99-033

File metadata

Title Protection Profile PP0020
Subject Common Criteria Protection Profile
Author Bundesamt für Sicherheit in der Informationstechnik
Creation date D:20051222104155+01'00'
Modification date D:20051222105259+01'00'
Pages 88
Creator Acrobat PDFMaker 7.0.5 für Word
Producer Acrobat Distiller 7.0.5 (Windows)

References

No references are available for this protection profile.

Updates

  • The protection profile data changed.
  • The protection profile data changed.
  • The protection profile data changed.
  • The protection profile data changed.
  • The protection profile was first processed.

Raw data 

{
  "_id": "740245e5ffe41cdf",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "740245e5ffe41cdf",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "PP0020b.pdf",
    "pp_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {},
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-PP-****": 1,
          "BSI-PP-0002": 1,
          "BSI-PP-0002-2001": 1,
          "BSI-PP-0005-2002": 2,
          "BSI-PP-0005-2002T": 1,
          "BSI-PP-0006-2002": 3,
          "BSI-PP-0006-2002T": 1,
          "BSI-PP-0020": 2,
          "BSI-PPP-0002": 1
        }
      },
      "cc_sar": {
        "ADO": {
          "ADO_DEL": 1,
          "ADO_IGS": 2,
          "ADO_IGS.1": 1
        },
        "ADV": {
          "ADV_FSP.1": 2,
          "ADV_HLD.2": 1,
          "ADV_IMP.1": 1,
          "ADV_IMP.2": 6,
          "ADV_LLD.1": 2,
          "ADV_RCR.1": 1,
          "ADV_SPM.1": 2
        },
        "AGD": {
          "AGD_ADM.1": 2,
          "AGD_USR.1": 2
        },
        "ALC": {
          "ALC_TAT.1": 1
        },
        "ASE": {
          "ASE_PPC.1": 4
        },
        "AVA": {
          "AVA_MSU.3": 5,
          "AVA_VLA.4": 5
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL4": 12,
          "EAL4 augmented": 2
        }
      },
      "cc_sfr": {
        "FCS": {
          "FCS_CKM": 7,
          "FCS_CKM.1": 21,
          "FCS_CKM.2": 2,
          "FCS_CKM.4": 26,
          "FCS_CKM.4.1": 1,
          "FCS_COP": 44,
          "FCS_COP.1": 13,
          "FCS_RND": 6,
          "FCS_RND.1": 13,
          "FCS_RND.1.1": 2
        },
        "FDP": {
          "FDP_ACC": 1,
          "FDP_ACC.1": 9,
          "FDP_ACC.2": 10,
          "FDP_ACC.2.1": 2,
          "FDP_ACF": 2,
          "FDP_ACF.1": 13,
          "FDP_ACF.1.1": 1,
          "FDP_ACF.1.2": 1,
          "FDP_ACF.1.3": 1,
          "FDP_ACF.1.4": 1,
          "FDP_IFC.1": 4,
          "FDP_ITC.1": 16,
          "FDP_ITC.2": 16,
          "FDP_RIP.1": 7,
          "FDP_RIP.1.1": 1,
          "FDP_SDI.1": 2,
          "FDP_SDI.2": 5,
          "FDP_SDI.2.1": 1,
          "FDP_SDI.2.2": 1,
          "FDP_UCT": 1,
          "FDP_UCT.1": 11,
          "FDP_UCT.1.1": 1,
          "FDP_UIT": 1,
          "FDP_UIT.1": 6,
          "FDP_UIT.1.1": 1,
          "FDP_UIT.1.2": 1
        },
        "FIA": {
          "FIA_AFL": 12,
          "FIA_AFL.1": 5,
          "FIA_ATD.1": 7,
          "FIA_ATD.1.1": 1,
          "FIA_UAU.1": 10,
          "FIA_UAU.1.1": 1,
          "FIA_UAU.1.2": 1,
          "FIA_UAU.4": 8,
          "FIA_UAU.4.1": 1,
          "FIA_UID.1": 7,
          "FIA_UID.1.1": 1,
          "FIA_UID.1.2": 1
        },
        "FMT": {
          "FMT_LIM": 6,
          "FMT_LIM.1": 20,
          "FMT_LIM.1.1": 2,
          "FMT_LIM.2": 19,
          "FMT_LIM.2.1": 1,
          "FMT_MSA.1": 1,
          "FMT_MSA.2": 19,
          "FMT_MSA.3": 2,
          "FMT_MTD": 27,
          "FMT_MTD.1": 7,
          "FMT_SMF.1": 19,
          "FMT_SMF.1.1": 1,
          "FMT_SMR.1": 19,
          "FMT_SMR.1.1": 1,
          "FMT_SMR.1.2": 1
        },
        "FPT": {
          "FPT_AMT.1": 4,
          "FPT_FLS.1": 11,
          "FPT_FLS.1.1": 1,
          "FPT_PHP.3": 10,
          "FPT_PHP.3.1": 1,
          "FPT_RVM.1": 10,
          "FPT_RVM.1.1": 1,
          "FPT_SEP.1": 10,
          "FPT_SEP.1.1": 1,
          "FPT_SEP.1.2": 1,
          "FPT_TST.1": 11,
          "FPT_TST.1.1": 1,
          "FPT_TST.1.2": 1,
          "FPT_TST.1.3": 2
        },
        "FTP": {
          "FTP_ITC.1": 14,
          "FTP_ITC.1.1": 1,
          "FTP_ITC.1.2": 1,
          "FTP_ITC.1.3": 1,
          "FTP_TRP.1": 4
        }
      },
      "certification_process": {
        "OutOfScope": {
          "FDP_ACF.1 101 Application note 29: Keys and other data for creation of qualified signatures are out of scope of this protection profile. 102 The TOE shall meet the requirement \u201cSecurity attribute based access": 1,
          "of medical data. The protection of those data themselves against disclosure and manipulation is out of scope of the card, because they are not stored in the card. 9 The fact that a trusted channel was": 1,
          "out of scope": 2
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 1
          }
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 10
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "SRC": {
          "SRC Security Research \u0026 Consulting": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 6
          },
          "SHA2": {
            "SHA-224": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {
        "FI": {
          "Malfunction": 3,
          "Physical Tampering": 2,
          "Physical tampering": 1,
          "fault injection": 1,
          "malfunction": 4,
          "physical tampering": 4
        },
        "SCA": {
          "DPA": 1,
          "physical probing": 4,
          "side channels": 2
        },
        "other": {
          "Bleichenbacher attack": 1,
          "reverse engineering": 1
        }
      },
      "standard_id": {
        "CC": {
          "CCIMB-99-031": 1,
          "CCIMB-99-032": 1,
          "CCIMB-99-033": 1
        },
        "FIPS": {
          "FIPS 180-2": 1,
          "FIPS 46-3": 1,
          "FIPS PUB 46-3": 1
        },
        "ISO": {
          "ISO/IEC 7816-2": 1,
          "ISO/IEC 7816-4": 1,
          "ISO/IEC9796-2": 2
        },
        "PKCS": {
          "PKCS #1": 1,
          "PKCS#1": 2
        },
        "X509": {
          "X.509": 7,
          "x.509": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "HPC": {
            "HPC": 31
          }
        },
        "DES": {
          "3DES": {
            "TDES": 4,
            "Triple-DES": 8
          },
          "DES": {
            "DES": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/Author": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "/CreationDate": "D:20051222104155+01\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 7.0.5 f\u00fcr Word",
      "/ModDate": "D:20051222105259+01\u002700\u0027",
      "/Producer": "Acrobat Distiller 7.0.5 (Windows)",
      "/SourceModified": "D:20051222091932",
      "/Subject": "Common Criteria Protection Profile",
      "/Title": "Protection Profile PP0020",
      "pdf_file_size_bytes": 625658,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 88
    },
    "report_filename": "PP0020a.pdf",
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {},
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-PP-0005-2002T": 1,
          "BSI-PP-0006-2002T": 1,
          "BSI-PP-0020": 1,
          "BSI-PP-0020-2005": 10
        }
      },
      "cc_sar": {
        "ADV": {
          "ADV_IMP.2": 2
        },
        "APE": {
          "APE_DES.1": 1,
          "APE_ENV.1": 1,
          "APE_INT.1": 1,
          "APE_OBJ.1": 1,
          "APE_REQ.1": 1,
          "APE_SRE.1": 1
        },
        "AVA": {
          "AVA_MSU.3": 2,
          "AVA_VLA.4": 2
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 4": 3,
          "EAL 4 augmented": 2,
          "EAL4": 1
        }
      },
      "cc_sfr": {
        "FCS": {
          "FCS_CKM": 1,
          "FCS_CKM.4": 1,
          "FCS_COP": 7,
          "FCS_RND.1": 1
        },
        "FDP": {
          "FDP_ACC.2": 1,
          "FDP_ACF.1": 1,
          "FDP_RIP.1": 1,
          "FDP_SDI.2": 1,
          "FDP_UCT.1": 1,
          "FDP_UIT.1": 1
        },
        "FIA": {
          "FIA_AFL": 2,
          "FIA_ATD.1": 1,
          "FIA_UAU.1": 1,
          "FIA_UAU.4": 1,
          "FIA_UID.1": 1
        },
        "FMT": {
          "FMT_LIM.1": 1,
          "FMT_LIM.2": 1,
          "FMT_MTD": 5,
          "FMT_SMF.1": 1,
          "FMT_SMR.1": 1
        },
        "FPT": {
          "FPT_FLS.1": 1,
          "FPT_PHP.3": 1,
          "FPT_RVM.1": 1,
          "FPT_SEP.1": 1,
          "FPT_TST.1": 1
        },
        "FTP": {
          "FTP_ITC.1": 1
        }
      },
      "certification_process": {
        "ConfidentialDocument": {
          "Profile electronic Health Card (eHC) \u2013 elektronische Gesundheitskarte (eGK), T-Systems GEI GmbH (confidential document) [7] Common Criteria Protection Profile electronic Health Card (eHC) \u2013 elektronische": 1
        }
      },
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {
        "FI": {
          "Physical Tampering": 1
        }
      },
      "standard_id": {
        "BSI": {
          "AIS 32": 1
        },
        "ISO": {
          "ISO/IEC 15408": 2
        },
        "X509": {
          "X.509": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "HPC": {
            "HPC": 3
          }
        },
        "DES": {
          "DES": {
            "DES": 1
          }
        }
      },
      "technical_report_id": {
        "BSI": {
          "BSI 7125": 2,
          "BSI 7148": 1,
          "BSI 7149": 1
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "BSI",
      "/Company": "BSI",
      "/CreationDate": "D:20051222132644+01\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 7.0.5 f\u00fcr Word",
      "/Keywords": "BSI-PP-0017-2005",
      "/ModDate": "D:20051222132834+01\u002700\u0027",
      "/Producer": "Acrobat Distiller 7.0.5 (Windows)",
      "/SourceModified": "D:20051222112339",
      "/Title": "PP Certification Report BSI-PP-0017-2005",
      "pdf_file_size_bytes": 146419,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 21
    }
  },
  "scheme_metadata": null,
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "f1359b5ce96c69432b586b89e68d25f14fb000139046ea820a6ff9612ffee85d",
      "txt_hash": "98d41a4f4a38bed0a88ad474d8d1c0df225a37a7a8bea3cf36ba7a135daa6cd0"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "421320db9715478f3650f862d7f51678554f9966617e25120cab505f5198b5f1",
      "txt_hash": "5dbc850f1dc9f6645bf67efa2df60f63090dc58703cafa18687926aaa17e7702"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "ICs, Smart Cards and Smart Card-Related Devices and Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "Protection Profile for Health Professional Card (HPC) - Heilberufsausweis (HBA), Version 1.02",
    "not_valid_after": "2013-01-29",
    "not_valid_before": "2005-12-14",
    "pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/PP0020b.pdf",
    "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/PP0020a.pdf",
    "scheme": "DE",
    "security_level": {
      "_type": "Set",
      "elements": [
        "EAL4+"
      ]
    },
    "status": "archived",
    "version": "1.02"
  }
}