Utimaco: A member of the Sophos Group

SafeGuard® CryptoServer QES in evaluation according to Common Criteria EAL 4+

News

Kategorie: Product

SafeGuard® CryptoServer QES in evaluation according to Common Criteria EAL 4+

 

AACHEN, DE – Utimaco Safeware, a global leader in hardware based data security solutions, announces that its innovative Hardware Security Module (HSM) SafeGuard® CryptoServer QES is in evaluation according to the Common Criteria Evaluation and Certification Schema, and targeting the accreditation for German signature law.The international Common Criteria standard is adopted by several countries including the United States, Canada, Germany, United Kingdom, France and the Netherlands as their national IT security certification schema. SafeGuard® CryptoServer is validated to FIPS 140-2 Level 3, the most widely adopted security evaluation schema for cryptographic solutions in governments and enterprises. Thanks to its tamper detection and response mechanism the “Physical Security” aspect of SafeGuard® CryptoServer has been rated at the highest possible FIPS 140-2 Level 4.Utimaco is taking its commitment for providing high-security solutions a step further: SafeGuard® CryptoServer QES is the first HSM worldwide that is being evaluated to Common Criteria Evaluation Assurance Level EAL 4+ and covering both software functionality and physical protection mechanisms. Its Security Target is based on the recognized Secure Signature Creation Device (SSCD) Protection Profile.“Going through this Common Criteria certification and fulfilling security requirements of such a high level will enable SafeGuard® CryptoServer to be the first Hardware Security Module in the market becoming accredited for the usage as Security Signature Creation Device for Qualified Electronic Signatures (QES) according to the German signature law” says Dieter Bong, Product Manager for SafeGuard®  CryptoServer. “This will provide the answer to the increasing market demand for mass-signing capabilities which are compliant to legal requirements, and will be the door-opener for many new applications requiring the use of Qualified Electronic Signatures.”