SCM Microsystems Gains First Common Criteria Certification for Smart Card/PIN Pad Readers

SCM Microsystems Gains First Common Criteria Certification for Smart Card/PIN Pad Readers

FREMONT, Calif., March 14 /PRNewswire-FirstCall/–SCM Microsystems, Inc. (Nasdaq: SCMM; Prime Standard: SMY), a leading provider of solutions that open the Digital World, today announced that its SPRx32 smart card readers have been certified for Common Criteria EAL (Evaluation Assurance Level) 3+. The SPRx32 is a network-ready device that combines a smart card interface with a PIN pad. This marks the first time a smart card/PIN pad reader has achieved EAL3+ certification, meeting the industry’s highest and most stringent security requirements.

The EAL 3+ certification means the SPRx32 complies with the international requirements for smart card/PIN pad readers used with digital signatures, enabling the readers to support a range of PIN-based smart card applications in the financial, government and enterprise sectors, both here and abroad.

In addition, the readers meet the requirements of EMV specifications developed and enforced by major credit card organizations including Europay, MasterCard and VISA. Compliance with EMV specifications ensures the SPRx32’s compatibility for home banking and card payment applications worldwide.

“SCM Microsystems is proud to be the first reader manufacturer to receive Common Criteria EAL3+ certification–the highest level of tested assurance met by any smart card reader,” said Jason Schouw, vice president, Americas, for SCM Microsystems. “We are committed to providing our customers with security products that meet the industry’s most rigorous standards. This certification guarantees our SPRx32 readers will support the high security requirements for digital signatures that are essential for conducting commerce in a global environment.”

The “Common Criteria” (ISO 15408) is a security evaluation methodology that combines the European ITSEC and the North American “Orange Book” methodologies. These criteria are used to evaluate IT solutions for compliance with stringent industry standards based on defined assurance levels. Specifically, the Common Criteria certification process is intended to promote the secure exchange of information in the Digital World. The Common Criteria define different security levels including EAL3+, a level normally associated with digital signatures for documents, financial applications for bankcards and other high-security applications. The security evaluation analyzes security mechanisms included in a smart card reader, both logical and physical, to confirm its readiness to thwart attacks of hackers on the reader’s software and hardware.

The SPRx32 is specifically designed to protect a PIN code from theft or unauthorized sources while connected to the network. It provides a high level of security by allowing a PIN code to be entered locally and safely on the reader itself without being transmitted to an untrusted PC. The SPRx32 series is ideal for secure web access, online banking and sensitive database access such as personnel or healthcare records. On-board flash enables future firmware and application enhancements that guarantee against obsolescence.

Certification of the SPRx32 readers was granted by TUV Informationstechnik (TUViT) GmbH, which formally presented the Common Criteria Certificate to SCM Microsystems on March 13th at the CeBIT 2003 exhibition in Hanover. For more information about Common Criteria validation of SCM’s SPRx32 readers, please visit

About SCM Microsystems

SCM Microsystems is a leading supplier of solutions that open the Digital World by enabling people to conveniently access digital content and services. SCM’s Security business provides smart card reader technology for the PC platform and conditional access modules for the digital TV platform to OEM customers in the government, financial, enterprise and broadcasting markets worldwide. The company’s Digital Media and Video business provides hardware, software and silicon solutions for creating and sharing digital media content to the worldwide retail market under the Dazzle™ brand. Global headquarters are in Fremont, California, with European headquarters in Ismaning, Germany. For additional information, visit the SCM Microsystems web site at