JEDS—A Community for the Evaluation and Certification of Embedded Devices (U30b)
JEDS, the JIWG Embedded Devices Subgroup, addresses the Common Criteria evaluation and certification of embedded devices. That includes e.g. payment terminals, tachograph vehicle units, smart meters, taxi meters, access control terminals, Hardware Security Modules and IoT devices. Embedded devices constitute a new and growing market for CC evaluations with challenging tasks due the high complexity of the evaluated products, consisting of hardware with several cpus and controllers, multilevel boot loaders, operating system, application software, … and so on. To cope with this challenge the European Certification bodies have established JEDS in cooperation with qualified evaluation labs. Refinements of the CC evaluation methodology, attack method and attack rating papers are elaborated in common work and mutually recognized by the European Certification bodies. A subgroup called JTEMS develops CC evaluation methodology in the area of payment terminals. The presentation will recapitulate the past, shows the present development and gives a prospect into the future. The speaker is the chairperson of JEDS.