Modern devices like phones and Set Top Boxes (STB) are commonly used for content delivery and payment services by applying multiple functionalities in a single chip or SoC. Dedicated secure sub-systems have to be implemented in order to protect solutions from the data leakage that can cause monetary and business losses. The challenge for the functionality of such developments is not only to retain the security of the smartcard in the secure element but also to provide a claim to the standard certification schemes such as EMVCo and Common Criteria (CC – ISO 15408), without overhead introduced by the changing form factor.
Riscure has a long-standing experience of providing free-format evaluations of SoCs with integrated sub-systems which are complex due to the changed properties of the integrated Secure Element (iSE) as well as helping vendors in the process of certification. Therefore, in this whitepaper, our experts share insights into the growing challenge of evaluating vast number functionalities in a single secure enclave. Further, Riscure gives advice to vendors on how to approach the new paradigm and its certification standards.
This paper is the most valuable for vendors that would like to reduce costs of fixes, development, evaluation, certification, and time to market.