ePassport High Assurance Evaluations in a Timely Manner (S31a)
eMRTDs (epassports) are widely deployed throughout the world. These eMRTDs implement the well-known security requirements of ICAO. Over 5 of these were evaluated by the speaker’s organization, and these are deployed in some of the largest countries. This includes single eMRTD products and composite evaluations of an eMRTD application on a secure smart card platform. In the years that it has existed, the ICAO standard has been formalized in 4 widely applied and related Protection Profiles (PP-0055, PP-0056, PP-0068 and PP-0056-V2). This world-wide ICAO standard and its protection profiles show a good example of bringing high-assurance to CC and certifying secure eMRTDs. This presentation will reveal the added value of a high-assurance CC evaluation on an eMRTD, and provide suggestions for improvement of the used protection profiles related to evaluation quality and developer efforts to produce evidence.