Java Card Multi-Assurance PP Configuration and Firewall ADV_SPM PP Module

Web information

Status active
Valid from 17.12.2025
Scheme 🇩🇪 DE
Category ICs, Smart Cards and Smart Card-Related Devices and Systems
Security level ALC_DVS.2, ADV_SPM.1, ALC_FLR.2, EAL4+, AVA_VAN.5

Certification report

Extracted keywords

Security level
EAL 4, EAL 2, EAL 4 augmented
Security Assurance Requirements (SAR)
ACE_INT, ACE_CCL, ACE_SPD, ACE_OBJ, ACE_ECD, ACE_REQ, ACE_MCO, ACE_CCO, ADV_SPM, ADV_SPM.1, ALC_DVS.2, ALC_FLR.2, ALC_FLR, AVA_VAN.5
Protection profiles
BSI-CC-PP-0123-2025, BSI-CC-PP-0099-V3, BSI-CC-PP-0099-V3-2024
Evaluation facilities
TÜV Informationstechnik

Certification process
1, 26.11.2025, Evaluation Technical Report Summary (ETR Summary), TÜV Informationstechnik GmbH (confidential document) [7] Java Card System – Open Configuration Protection Profile, Version 3.2, July 2024

Standards
AIS 14, AIS 19, AIS 41, ISO/IEC 15408, ISO/IEC 18045, ISO/IEC 17065

File metadata

Title Certification Report BSI-CC-PP-0123-2025
Subject Java Card System - Multi-Assurance PP Configuration and Firewall ADV_SPM PP Module
Keywords Java Card System, Multi-Assurance PP Configuration, Firewall ADV_SPM PP Module
Author Federal Office for Information Security
Pages 15

Protection Profile

Extracted keywords

Randomness
RNG

JavaCard API constants
TYPE_ACCESS

Security level
EAL4, EAL 4, EAL4 augmented, EAL 4 augmented
Claims
O.FIREWALL_MOD, O.GLOBAL_ARRAYS_INTEG_MOD, O.ARRAY_VIEWS_CONFID_MOD, O.ARRAY_VIEWS_INTEG_MOD, O.NATIVE_MOD, O.FIREWALL, O.GLOBAL_ARRAYS_INTEG, O.ARRAY_VIEWS_CONFID, O.ARRAY_VIEWS_INTEG, O.NATIVE, O.LOAD, O.SID, O.ARRAY_VIEWS_, O.OPERATE, O.GLOBAL_ARRAYS_CONFID, O.ALARM, O.TRANSACTION, O.CIPHER, O.RNG, O.PIN-MNGT, O.KEY-, O.REALLOCATION, O.KEY-MNGT, O.INSTALL, O.RESOURCES, O.DELETION, O.OBJ-DELETION, O.JAVAOBJECT, O.GLOBAL_ARRAY, T.CONFID-, T.INTEG-, T.SID, T.EXE-, T.NATIVE, T.RESOURC, T.DELETION, T.INSTALL, T.OBJ-, T.PHYSICAL, T.CONFID-APPLI-DATA, T.CONFID-JCS-DATA, T.INTEG-APPLI-DATA, T.INTEG-JCS-DATA, T.EXE-CODE, T.CONFID-JCS-CODE, T.INTEG-APPLI-CODE, T.INTEG-JCS-CODE, T.RESOURCES, T.OBJ-DELETION, T.INTEG-APPLI-, A.CAP_FILE, R.JAVA, OP.CREATE, OP.INVK_INTERFACE, OP.INVK_VIRTUAL, OP.JAVA, OP.THROW, OP.TYPE_ACCESS, OP.ARRAY_LENGTH, OP.ARRAY_T_ALOAD, OP.ARRAY_T_ASTORE, OP.ARRAY_AASTORE, OP.ARRAY_ACCESS, OP.INSTANCE_FIELD, OP.PUTFIELD, OP.PUTSTATIC, OP.PUT, OE.VERIFICATION, OE.CODE-EVIDENCE, OE.SCP, OE.CARD-, OE.CARD-MANAGEMENT, OE.CODE-, OE.CAP_FILE, OSP.VERIFICATION
Security Assurance Requirements (SAR)
ADV_SPM, ADV_SPM.1, ADV_ARC.1, ADV_FSP.1, ADV_TDS.1, ADV_FSP.4, ADV_TDS.3, ADV_IMP.1, ADV_FSP.2, ADV_TDS.2, AGD_OPE.1, AGD_PRE.1, ALC_DVS.2, ALC_FLR.2, ALC_TAT.1, ALC_CMC.4, ALC_CMS.1, ALC_DVS.1, ALC_LCD.1, ALC_CMS.4, ALC_DEL.1, ATE_COV.2, ATE_FUN.1, ATE_COV.1, ATE_IND.2, ATE_DPT.1, AVA_VAN.5, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_REQ.1, ASE_REQ.2, ASE_OBJ.2, ASE_SPD.1, ASE_TSS.1
Security Functional Requirements (SFR)
FDP_ACC, FDP_ACF, FDP_IFC, FDP_IFF, FDP_ACC.2, FDP_ACF.1, FDP_IFC.1, FDP_IFF.1, FDP_ACC.1, FIA_UID, FIA_UID.2, FIA_UID.1, FMT_MSA, FMT_SMF, FMT_SMR, FMT_MTD, FMT_MSA.1, FMT_MSA.2, FMT_MSA.3, FMT_SMF.1, FMT_SMR.1, FMT_MTD.1
Protection profiles
BSI-CC-PP-0123-2025, BSI-CC-PP-0099-V3-2024

Side-channel analysis
Reverse engineering

File metadata

Title Java Card System - Multi-Assurance PP Configuration and Firewall ADV_SPM PP Module v3.2M
Subject Java Card System - Multi-Assurance PP Configuration and Firewall ADV_SPM PP Module
Keywords Java Card System, Multi-Assurance PP Configuration, Firewall ADV_SPM PP Module
Author Nicolas Ponsini;Tyrone Stodart
Pages 42

References

No references are available for this protection profile.

Updates Feed

  • The protection profile became unavailable — it disappeared from the upstream listing.
  • The protection profile was first processed.

Raw data

{
  "_id": "d5c39d08d0322863",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "d5c39d08d0322863",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "pp0123b_pdf.pdf",
    "pp_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.CAP_FILE": 1
        },
        "O": {
          "O.ALARM": 5,
          "O.ARRAY_VIEWS_": 3,
          "O.ARRAY_VIEWS_CONFID": 5,
          "O.ARRAY_VIEWS_CONFID_MOD": 12,
          "O.ARRAY_VIEWS_INTEG": 5,
          "O.ARRAY_VIEWS_INTEG_MOD": 11,
          "O.CIPHER": 4,
          "O.DELETION": 3,
          "O.FIREWALL": 14,
          "O.FIREWALL_MOD": 31,
          "O.GLOBAL_ARRAY": 1,
          "O.GLOBAL_ARRAYS_CONFID": 3,
          "O.GLOBAL_ARRAYS_INTEG": 7,
          "O.GLOBAL_ARRAYS_INTEG_MOD": 11,
          "O.INSTALL": 6,
          "O.JAVAOBJECT": 20,
          "O.KEY-": 1,
          "O.KEY-MNGT": 3,
          "O.LOAD": 5,
          "O.NATIVE": 9,
          "O.NATIVE_MOD": 12,
          "O.OBJ-DELETION": 2,
          "O.OPERATE": 8,
          "O.PIN-MNGT": 3,
          "O.REALLOCATION": 3,
          "O.RESOURCES": 3,
          "O.RNG": 3,
          "O.SID": 19,
          "O.TRANSACTION": 4
        },
        "OE": {
          "OE.CAP_FILE": 4,
          "OE.CARD-": 4,
          "OE.CARD-MANAGEMENT": 9,
          "OE.CODE-": 1,
          "OE.CODE-EVIDENCE": 8,
          "OE.SCP": 19,
          "OE.VERIFICATION": 13
        },
        "OP": {
          "OP.ARRAY_AASTORE": 2,
          "OP.ARRAY_ACCESS": 2,
          "OP.ARRAY_LENGTH": 2,
          "OP.ARRAY_T_ALOAD": 2,
          "OP.ARRAY_T_ASTORE": 2,
          "OP.CREATE": 5,
          "OP.INSTANCE_FIELD": 1,
          "OP.INVK_INTERFACE": 5,
          "OP.INVK_VIRTUAL": 4,
          "OP.JAVA": 3,
          "OP.PUT": 5,
          "OP.PUTFIELD": 1,
          "OP.PUTSTATIC": 1,
          "OP.THROW": 3,
          "OP.TYPE_ACCESS": 3
        },
        "OSP": {
          "OSP.VERIFICATION": 3
        },
        "R": {
          "R.JAVA": 8
        },
        "T": {
          "T.CONFID-": 3,
          "T.CONFID-APPLI-DATA": 18,
          "T.CONFID-JCS-CODE": 4,
          "T.CONFID-JCS-DATA": 9,
          "T.DELETION": 3,
          "T.EXE-": 3,
          "T.EXE-CODE": 3,
          "T.INSTALL": 4,
          "T.INTEG-": 8,
          "T.INTEG-APPLI-": 3,
          "T.INTEG-APPLI-CODE": 7,
          "T.INTEG-APPLI-DATA": 20,
          "T.INTEG-JCS-CODE": 4,
          "T.INTEG-JCS-DATA": 10,
          "T.NATIVE": 5,
          "T.OBJ-": 1,
          "T.OBJ-DELETION": 1,
          "T.PHYSICAL": 2,
          "T.RESOURC": 1,
          "T.RESOURCES": 5,
          "T.SID": 17
        }
      },
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-CC-PP-0099-V3-2024": 2,
          "BSI-CC-PP-0123-2025": 2
        }
      },
      "cc_sar": {
        "ADV": {
          "ADV_ARC.1": 6,
          "ADV_FSP.1": 3,
          "ADV_FSP.2": 2,
          "ADV_FSP.4": 13,
          "ADV_IMP.1": 5,
          "ADV_SPM": 49,
          "ADV_SPM.1": 14,
          "ADV_TDS.1": 2,
          "ADV_TDS.2": 1,
          "ADV_TDS.3": 8
        },
        "AGD": {
          "AGD_OPE.1": 6,
          "AGD_PRE.1": 5
        },
        "ALC": {
          "ALC_CMC.4": 1,
          "ALC_CMS.1": 1,
          "ALC_CMS.4": 1,
          "ALC_DEL.1": 1,
          "ALC_DVS.1": 2,
          "ALC_DVS.2": 10,
          "ALC_FLR.2": 9,
          "ALC_LCD.1": 3,
          "ALC_TAT.1": 3
        },
        "ASE": {
          "ASE_CCL.1": 1,
          "ASE_ECD.1": 4,
          "ASE_INT.1": 5,
          "ASE_OBJ.2": 3,
          "ASE_REQ.1": 2,
          "ASE_REQ.2": 2,
          "ASE_SPD.1": 2,
          "ASE_TSS.1": 1
        },
        "ATE": {
          "ATE_COV.1": 2,
          "ATE_COV.2": 3,
          "ATE_DPT.1": 3,
          "ATE_FUN.1": 6,
          "ATE_IND.2": 1
        },
        "AVA": {
          "AVA_VAN.5": 10
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 4": 1,
          "EAL 4 augmented": 1,
          "EAL4": 10,
          "EAL4 augmented": 4
        }
      },
      "cc_sfr": {
        "FDP": {
          "FDP_ACC": 12,
          "FDP_ACC.1": 4,
          "FDP_ACC.2": 2,
          "FDP_ACF": 11,
          "FDP_ACF.1": 7,
          "FDP_IFC": 15,
          "FDP_IFC.1": 5,
          "FDP_IFF": 13,
          "FDP_IFF.1": 8
        },
        "FIA": {
          "FIA_UID": 7,
          "FIA_UID.1": 1,
          "FIA_UID.2": 1
        },
        "FMT": {
          "FMT_MSA": 46,
          "FMT_MSA.1": 5,
          "FMT_MSA.2": 2,
          "FMT_MSA.3": 8,
          "FMT_MTD": 7,
          "FMT_MTD.1": 2,
          "FMT_SMF": 9,
          "FMT_SMF.1": 4,
          "FMT_SMR": 13,
          "FMT_SMR.1": 8
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {
        "misc": {
          "TYPE_ACCESS": 3
        }
      },
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RNG": 4
        }
      },
      "side_channel_analysis": {
        "other": {
          "Reverse engineering": 1
        }
      },
      "standard_id": {},
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/Author": "Nicolas Ponsini;Tyrone Stodart",
      "/Keywords": "Java Card System, Multi-Assurance PP Configuration, Firewall ADV_SPM PP Module",
      "/Subject": "Java Card System - Multi-Assurance PP Configuration and Firewall ADV_SPM PP Module",
      "/Title": "Java Card System - Multi-Assurance PP Configuration and Firewall ADV_SPM PP Module v3.2M",
      "pdf_file_size_bytes": 567153,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.oracle.com/",
          "mailto:[email protected]",
          "https://www.bsi.bund.de/",
          "mailto:[email protected]"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 42
    },
    "report_filename": "pp0123a_pdf.pdf",
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {},
      "cc_protection_profile_id": {
        "BSI": {
          "BSI-CC-PP-0099-V3": 1,
          "BSI-CC-PP-0099-V3-2024": 1,
          "BSI-CC-PP-0123-2025": 8
        }
      },
      "cc_sar": {
        "ACE": {
          "ACE_CCL": 1,
          "ACE_CCO": 1,
          "ACE_ECD": 1,
          "ACE_INT": 1,
          "ACE_MCO": 1,
          "ACE_OBJ": 1,
          "ACE_REQ": 1,
          "ACE_SPD": 1
        },
        "ADV": {
          "ADV_SPM": 9,
          "ADV_SPM.1": 3
        },
        "ALC": {
          "ALC_DVS.2": 4,
          "ALC_FLR": 1,
          "ALC_FLR.2": 4
        },
        "AVA": {
          "AVA_VAN.5": 4
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 2": 1,
          "EAL 4": 5,
          "EAL 4 augmented": 4
        }
      },
      "cc_sfr": {},
      "certification_process": {
        "ConfidentialDocument": {
          "1, 26.11.2025, Evaluation Technical Report Summary (ETR Summary), T\u00dcV Informationstechnik GmbH (confidential document) [7] Java Card System \u2013 Open Configuration Protection Profile, Version 3.2, July 2024": 1
        }
      },
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "TUV": {
          "T\u00dcV Informationstechnik": 3
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "BSI": {
          "AIS 14": 1,
          "AIS 19": 1,
          "AIS 41": 1
        },
        "ISO": {
          "ISO/IEC 15408": 4,
          "ISO/IEC 17065": 2,
          "ISO/IEC 18045": 4
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "Federal Office for Information Security",
      "/Keywords": "Java Card System, Multi-Assurance PP Configuration, Firewall ADV_SPM PP Module",
      "/Subject": "Java Card System - Multi-Assurance PP Configuration and Firewall ADV_SPM PP Module",
      "/Title": "Certification Report BSI-CC-PP-0123-2025",
      "pdf_file_size_bytes": 241788,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 15
    }
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "745ac4ea31cf76d680b4cf1340910b1e1896c3d917ec77a0d7e6ebca35734718",
      "txt_hash": "dc18cfa3ccb66a7edd99a228974598af44db6820a045008660bab6a9a343fc42"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "ebad123e7e01c0dcfc3f35081364e85ffb7842a5da638e955e394f08b21f3b4f",
      "txt_hash": "726e2030e464949341ce86959247d891980c9bafb682d39b1273e06ae26fe548"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "ICs, Smart Cards and Smart Card-Related Devices and Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "Java Card Multi-Assurance PP Configuration and Firewall ADV_SPM PP Module",
    "not_valid_after": null,
    "not_valid_before": "2025-12-17",
    "pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0123b_pdf.pdf",
    "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0123a_pdf.pdf",
    "scheme": "DE",
    "security_level": {
      "_type": "Set",
      "elements": [
        "ALC_FLR.2",
        "ALC_DVS.2",
        "ADV_SPM.1",
        "EAL4+",
        "AVA_VAN.5"
      ]
    },
    "status": "active",
    "version": "BSI-CC-PP-0123-2025"
  }
}