Certification body according to eIDAS

SRC Security Research & Consulting GmbH was appointed by the Federal Network Agency for Electricity, Gas, Telecommunications, Post and Railways as „eIDAS Certification Body“ according to Article 30 (1) of the Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC (overview certification bodies).

The "eIDAS Certification Body" of SRC is able to perform the certification of a product in combination with or based on an existing evaluation according to Common Criteria as a qualified electronic signature creation unit or qualified electronic signature creation device (QSCD) according to Article 30 (3) of the eIDAS Regulation.

In doing so, specific safety regulations (Protection Profiles) as listed in the Commission Implementing Decision (EU) 2016/650 of 25 April 2016 laying down standards for the security assessment of qualified signature and seal creation devices pursuant to Articles 30(3) and 39(2) of Regulation (EU) No 910/2014 of the European Parliament and of the Council on electronic identification and trust services for electronic transactions in the internal market are to be used for the products (Article 30 (3) (a)).

Alternatively, the eIDAS Regulation allows the use of alternative test methods provided that an equivalent level of safety is applied and the test method has been communicated to the EU Commission (Article 30 (3) (b)). As the above-mentioned Implementing Decision (EU) 2016/650 does not list any Protection Profiles containing safety regulations for QSCD’s intended to be used by a trusted service provider, SRC has, notified by the EU Commission, established a „Certification of the conformity of QSCDs for server-signing with the requirements laid down in Annex II of Regulation (EU) No. 910/2014“ for the certification of QSCD’s within the context of remote signatures.

The EU Commission publishes and updates lists of reported “eIDAS Certification Bodies” and QSCD’s as well as currently notified alternative testing methods.

Contact

Thomas Hueske
Detlef Kraus
Dr. Johannes Ueberberg 

info[at]src-gmbh.de
telephone: +49(0)228 2806-0
telefax: +49(0)228 2806-199