Smart Card / Microelectronics Module
Testing and Certification
(Issue 2 Dated 1st August 2006)
1.0 PURPOSE:
This procedure provides the requirements and criteria for testing and certification of smart cards / Microelectronics Modules
2.0 SCOPE:
This procedure covers smart cards / Microelectronics Modules testing and certification as per SCOSTA specifications v1.2b: March, 2002 including latest Errata and Addendum, and DL/RC and MNIC Applications as per National Standards.
3.0 RESPONSIBILITIES:
Certification Body: To interact with the client for facilitation of certification as governed by the rules and procedures of the Certification Body.
Software Test Laboratory: Director (Smart Card Test and Evaluation) is responsible for planning and managing the testing activity.
Client: is responsible to provide inputs, information and the hardware etc. as outlined in Application Form.
4.0 Criteria for Certification
The supplier (client) of Smart Card product / Microelectronics Module for the purpose of driving license and vehicle registration / National Identity Cards in India shall demonstrate the compliance of his Smart Card product / Microelectronics Module with the following criteria :
- SCOSTA specification V1.2b : March 2002 including latest Errata and
addendum.
- DL/RC / MNIC applications
- ISO 9001:2000 Certificate of the manufacturing facility for manufacturing of
Smart Card (implantation/ embedding) / Microelectronics Module and ISO 9001:2000 Certificate of the supplier/ client facility
- Certificate/ Declaration of conformity with ISO 7816. Part.-1,2,3
- Evidence of conformity/ Certificate of chip security assurance minimum ITSEC
Level 3 OR Common Criterion EAL level 4 OR VISA Level 3 OR NIST
Common criteria (ISO 15408)
- “Certificate of incorporation” of supplier in India
- “Certificate of registration” for brand name of product submitted
5.0 Requirements:
5.1 Clients shall submit the application form (SCPC-02-06-01/ SCPC-02-06-01) to the Director (Smart Card Product Certification), who acts as a contact point, along with the prescribed fee and other inputs.
5.2 Client shall sign “Certification Agreement Document” (SCPC-02-04) indicating agreeing with the rules and the procedures, “Terms and Conditions” of the Certification Body.
5.3 Director (Smart Card Product Certification) after preliminary evaluation of application and inputs, forwards the technical inputs and the product (smart card(s)/ Microelectronics Module to the Director (Smart Card Test & Evaluation), who constitutes the Test Engineering Cell.
5.4 a) It is mandatory that the manufacturing organization carrying out primary stage of manufacturing (implantation/ embedding) shall be ISO 9001 : 2000 registered with an accredited certification body.
b) If supplier is involved in printing and distribution only and different from manufacturer shall demonstrate the Quality Management System
- by producing ISO 9001: 2000 compliance certification with accredited
certification body.
c) In case of the ISO 9001:2000 Certificate of manufacturer and /or Supplier is expiring during the validity period of SCOSTA Certificate, then it will be mandatory on the part of applicant to get them renewed and provide valid ISO 9001:2000 certificate to Certification Body.
5.5 Certification Body ensures adequacy and completeness of the information and Hardware through a checklist and gives the acknowledgement to the Certification Body along with the “Nondisclosure Agreement”.
5.6 Test planning is done in accordance with SCOSTA Test Script. The Testing of Smart Card/ Microelectronics Module is carried out using Test Script and DL/RC and MNIC applications. The Black Box test strategies are used for carrying out testing. The persons involved in the testing will make efforts to understand the capabilities of the product to add value through feedback in the test case design.
5.7 Whenever a defect is found while executing the test, the same is logged.
5.8 A Test Summary Report is prepared that summarizes the test cases and categorize the defects according to their degree of severity in accordance with procedure.
5.9 The following documents shall be delivered to the Certification Body Director (Smart Card Product Certification) after the completion of tests:
5.10 Certification Committee evaluates the outputs of testing along with other inputs
a) To ensure the “fitness for use and conforming to specifications.”
b) To ensure all the procedures have been followed.
c) To ensure criteria defined are fulfilled and in conformance.
5.11 After satisfactory completion of the evaluation, based on the recommendation of Certification Committee. Head ( Smart Card Product Certification Body) issues the Certificate of Approval.
5.12 Director (Smart Card Product Certification) updates the database of “National Register of approved Smart Card/ Microelectronics Module Manufacturer/ Supplier” which is available on the public domain http://www.parivahan.nic.in and http://www.mnic.gov.in for reference.
5.13 Applicant/ Supplier has to maintain the system, which will be ensured through surveillance mechanism and audit/Renewal testing.
5.14 Applicant/Supplier is required to submit registration certificate for brand name of their product.
5.15 Applicant/Supplier is required to submit “certificate of incorporation” in India.