尋找感興趣的產品?
EMVCo Certification for Smart Cards (SoC, iSE, eSE)
We’ll perform a risk-free pre-evaluation to help you achieve an EMVCo certification for your smart cards.
Get Certified for Comprehensive Smart Card Security
For chipset, platform, and integrated circuit card (ICC) vendors, prioritizing security is crucial to gain competitive advantage. With Keysight EMVCo certification for smart cards, acquiring a payment industry certification is smooth and flexible. Our program is accredited by the EMVCo consortium to perform integrated circuit (IC) and platform evaluations as well as crypto library assessments.
To streamline your security evaluation campaign, we also offer the option to bundle our EMVCo certification program with other well-recognized standards such as Common Criteria.
We start the evaluation with a vulnerability analysis, during which we study design and implementation information and identify potential vulnerabilities. The result is a selection of tests for a penetration test campaign that aims to verify whether the product resists against an attacker with a high attack potential. With IC, platform, and ICC evaluation, our EMVCo certification program covers virtually all aspects of smart card development and deployment.
Key Benefits
Why Keysight for EMVCo Certification for Smart Cards?
Building on our vast experience conducting system-on-chip (SoC) evaluations, we’re proud to be the go-to lab for EMVCo evaluations of other technologies such as embedded Secure Elements (eSE) or integrated Secure Elements (iSE). To streamline market outreach for your payment products, we offer the option to bundle the EMVCo program with other standards. We also can fully separate pre-evaluation and certification work to promote efficiency for your development and evaluation. For example, during a pre-evaluation you can prepare your product for certification to help control risks much earlier in the development process. If you identify additional needs during the security evaluation program, we can fulfill those needs with a wide variety of training programs and security testing tools we offer.
/woman-works-office-desk-1600x900.jpg)
Defining the EMVCo Certification Tiers
Integrated circuit (IC) evaluation
This stage of evaluation includes all chip hardware as well as any software crypto libraries in the chip. Although this can be done through a dedicated EMVCo IC evaluation, vendors often choose the Common Criteria (CC) certification for this stage, because most smart card chips can also be used in other domains, like governmental applications that require this certification. EMVCo recognizes the results of CC tests in their IC certification process so that both evaluations can be conducted together with minimum overhead.
/keysight-worker-website-desktop-1200x800.png)
Platform evaluation
This stage focuses on the operating system as well as the chip. It provides a composite evaluation that builds upon the results of an IC evaluation. The scope includes all generic software, including cryptographic algorithms and other security mechanisms.
/worker-headset-speaking-1600x900.jpg)
Integrated circuit card (ICC) evaluation
This evaluation covers a complete product, including the platform and all applications. As a composite evaluation, it reuses chip evaluation and potentially platform evaluation results.
/worker-keysight-website-desktop-1200x800.png)
Need more security evaluation options?
We provide security evaluation services for product security risks beyond the scope mandated by EMVCo. By anticipating developments in attack potential and threats in the field, we can creatively challenge the security of your product and uncover potential areas of concern. This enables you to stay ahead of attackers and properly plan your product roadmap for the future.
/woman-headset-works-home-1200x900.jpg)
/hands-working-laptop-1200x900.jpg)
Looking for a Different EMVCo Certification?
Keysight also provides EMVCo evaluations and certification for software based mobile payment (SBMP) solutions. You can achieve an EMVCo SBMP certificate for the following:
- Software protection tools
- Host card emulation (HCE) for mobile applications and related software development kits (SDKs)
- Trusted execution environments (TEE)
- Consumer device card holder verification methods (CDCVM)
- Original equipment manufacturer (OEM) payment solutions
Learn more about our EMVCo SBMP evaluation and certification program, which is endorsed and trusted by multiple payment schemes and card vendors.
Interested in this service? Reach out to learn more.