The ANSSI has signed two mutual certificate recognition agreements :
SOG-IS European recognition agreement dated 2010 enables the certificates recognition between the signatory states of certificates issued by their certification body. This agreement supersedes the [1999 SOG-IS recognition agreement->doc294].
At the moment, two technical domains are concerned by this agreement for the high level of recognition: “smart cards and similar devices” and “hardware devices with security boxes”.
France is recognized for those two technical domains up to EAL7.
For the other technical domains, the recognition applies up CC EAL4.
The signatory countries of the agreement are:
Certification bodies qualified for the “smart cards and similar devices” technical domain are:
The latest Common Criteria Mutual Recognition Arrangement is applicable since September 8th, 2014.
This new agreement defines a new type of Protection profile (PP) in its K annex: Collaborative PP (cPP). This PP has a dedicated evaluation method specifying the generics CC. The evaluation method and the associated cPP are written by an international Technical Communities (iTC). Specific cPP evaluation methods are approved within the CCRA.
The CCRA recognition limits are now defined based on the used evaluation approach:
Finally, a transition plan between the 2 agreement versions was agreed on (see article 17 of the new agreement).
Until September 8th 2017, can be recognized up to level EAL 4 (i.e. based on previous agreement version):
Certificates recognised within the scope of this agreement are issued with the following mark:
The signatory countries of the agreement who issue certificates and their certification bodies are:
The common criteria website lists the countries that recognize these certificates, even if they don’t produce any :