The objective of this document is to define a composition model for the security evaluation of composite products. A composite product is a secure element that consists of an open platform and one or more applications. The model relies on the recognition of existing security evaluation certificates and significant re-use of these certificates and evaluation activity results. The model specifically addresses the composition of products that are evaluated under the EMVCo and Common Criteria schemes.
Previous Version(s)