Trusted Labs, specializing in security consulting and evaluation services, provided a smart card integrated circuit (IC) for Samsung (News - Alert) that complies with security assurance requirements for IT systems, the Common Criteria EAL7.
Claire Loiseaux, president of Trusted Labs, said, “I’m proud of our ability to adapt our Common Criteria and Formal Methods know-how to the hardware core of secure devices. This project will benefit the embedded devices industry, offering an efficient way to increase security by design and thus foster trust among end users in an open world.”
Trusted Labs integrates embedded systems security to deal with complex industrial issues, from security analysis to certification. Trusted Labs has mathematically verified the secure design and has developed in-depth testing methodology for the Memory Protection Unit that ensures the working of the security feature in integrated circuits.
Officials explained that the provision of the EAL7 certification of the EAL5+ certified IC - Samsung flash 264Kbyte smartcard IC makes it suitable for use in applications relating to finance and security ID based on 90nm technology. The applications leverage the IC’s security-critical functionalities.
The IC has passed all evaluation criteria stipulated by the French laboratory CEA LETI. Also the results are being further validated by the national French IT security agency ANSSI.
The security consulting and evaluation services provided by Trusted Labs are leveraged by telecom and transport operators, financial institutions, government/defense agencies, silicon vendors, card and terminal manufacturers, and others.
The company’s solutions ensure security in components and devices that are used in digital services such as mobile payment, e-ticketing, identification and access control. Trusted Labs goes further in helping customers imagine, create, formalize, design, and deploy the new services also, added officials.
In 2011, Trusted Labs joined hands with Esterel Technologies, a provider of model-based development solutions for critical systems and software, Inria, a French public research body dedicated to digital science and technology, Prove & Run, a startup focused at democratizing secure development methodologies to launch a collaborative project.
The project known as CEEC was aimed at producing a new software development methodology that will accelerate the certification of products that require very high levels of security.