Accredited test lab for IT-conformity
Your advantages
Checking security and conformity is of the highest importance, particularly for electronic ID documents such as the electronic passport (ePass). In the testing-field of ePass/eID, secunet offers manufacturers of chips, chip-systems and passports as well as public authorities to check personalised documents and their components, for example inlays. This is based on BSI TR-03105. In this framework, secunet conducts the tests of the logical layers of electronic passports (layer 6 and 7). In close cooperation with an accredited partner-lab, we also offer our clients to conduct conformity-tests for the physical layers according to Part II of Guideline TR-03105 (RF-communication).
Identity documents must be verified at international borders worldwide, which requires interoperability. To ensure interoperability, conformance testing based on standards is necessary for both identity documents and readers. The conformity testing laboratory at secunet offers manufacturers of eID terminals and inspection systems conformity tests (application, SDK) in accordance with BSI TR-03105 Part 5 in order to receive a BSI certification.
Several manufacturers of document readers have already used the testing services of the testing laboratory and successfully certified their products.
For the usage of electronic identity documents (eIDs) in online business processes a specific software on the eID holder's computer and/or mobile system connects the document itself and the online services that are authorised to have access to it. BSI TR-03124 specifies numerous technical details that are to be implemented in the so-called eID client software for Online-Authentication between an eService and national eID cards, e.g. the German eID card or the German electronic residence permit. On the side of the service provider an eID server according to BSI TR-03130 is used.
Our service in the field of conformity of eID clients or eID servers addresses providers of such software. Ultimately, secunet's test-report confirms their products to run correctly, securely and interoperable with all the other respective components within the eID infrastructure and is therefore a decisive element for the BSI-certification process.
Oder Informationssicherheitsrevision, ist Bestandteil eines jeden erfolgreichen Informationssicherheitsmanagements. Nur wenn etablierte Sicherheitsmaßnahmen und Prozesse regelmäßig überprüft werden, kann man eine zuverlässige Aussage über deren Wirksamkeit, Aktualität, Vollständigkeit und Angemessenheit und damit über den aktuellen Stand der Informationssicherheit insgesamt treffen.
Die IS-Revision ist deshalb ein wichtiges Werkzeug zum Feststellen, Erreichen und Aufrechterhalten eines angemessenen Sicherheitsniveaus. Mit unserer Prüfungstätigkeit zielen wir darauf ab, die Informationssicherheit bei unseren Kunden zu verbessern, Fehlentwicklungen frühzeitig zu erkennen, um sie ebenso frühzeitig korrigieren zu können, und die Wirtschaftlichkeit der Sicherheitsmaßnahmen und -prozesse zu optimieren.
Write us a message and we will get back to you as soon as possible.
