Guidance to Applicant

For

Smart card product / Microelectronics Module Certification

(Issue 2 Dated 1st August 2006)

 

 

INTRODUCTION

 

Smart card product / Microelectronics module Product Certification scheme is a third party Certification scheme promoted by NIC, Department of Information Technology, Government of India. This scheme is intended to provide by means of system assessment, testing and subsequent surveillance, an adequate level of confidence that the Smart card product  / Microelectronics module product conforms to the specified requirements of appropriate standards.

 

TERMINOLOGY

 

Smart card  / Microelectronics module Product Certification Scheme

 

Certification scheme for Smart card product / Microelectronics module is being operated by NIC, Department of Information Technology, and Government of India.

 

Certification Body (CB)

 

A body, which conducts certification of conformity, as per the standards and specifications defined.

 

Definition of Smart card product  /  Microelectronics module Product

 

Smart card product / Microelectronics module is a device capable of storing data and executing commands, which is a single chip microprocessor mounted on a plastic card and the dimensions of the card and chip are specified in ISO-7816 specifications, as may be amended time to time. It should be compliant with the specifications annexed at Annexure-I and any subsequent instructions from Ministry of Road Transport and Highways / Office of Registrar General, India as may be issued from time to time. The said microprocessor chip will, for DL & RC application and MNIC application, have non-volatile re-writable memory capacity of minimum 4 Kilo Byte and 16 kilo Byte respectively consisting of application data, file headers, security definitions, and a maximum of 350 bytes for Operating System Interfacing, as specified by Ministry of Road Transport & Highways/ Office of Registrar General, India from time to time.

 

Certification

 

Action by Certification Body demonstrating its confidence that manufacturer’s product and quality system is in conformity with specified requirements of appropriate standard and quality system requirements.

 

OBJECTIVE

 

The objectives of the scheme is to :

- provide a framework to the Smart card product / Microelectronics module industry for getting their product tested and   certified to relevant standards.

 

 

 

 

 

SCOPE

 

The scheme envisages to cover all Smart card product / Microelectronics module products intended to demonstrate conform SCOSTA requirements applicable to the Road Transport Application /MNIC Application.

 

OPERATION OF THE SCHEME

 

Operation of the scheme covers following aspects:

 

1.      Quality System

 

The manufacturer shall maintain a well defined and documented quality system as per the requirements of the Smart card product / Microelectronics module Certification Scheme.

 

1) Manufacturer shall produce a certificate of ISO 9001:2000 for Quality management  system of Smart card product  / Microelectronics module production facility from an accredited certification body.

 

2) If supplier is different from manufacturer (implantation/ embedding) then he shall     demonstrate to the implementation of QMS to certification body by providing ISO     9001:2000 certificate by an accredited certification body

 

2.      Testing Procedure

 

The manufacturer shall forward necessary information/documents, H/w, S/w to the test laboratory through Director (Smart card product Certification) along with samples. The manufacturer shall maintain records of all in-house testing (test reports) as per relevant requirements.

 

Testing and Test Report

 

All Samples of Smart card product / Microelectronics module for testing are submitted to certification body by manufacturer/supplier/or their authorized representative at company cost from his factory, godown or distributor/dealer. The samples for surveillance testing are selected at random by Certification Body or its authorized representatives and provided by supplier or manufacturer at company cost from his factory, godown or distributor/dealer.    The test charges would be borne by the manufacturer/supplier and are payable directly to the certification body. The test laboratory after conducting the tests, forwards the test report to Certification Body. A copy of the test report can be made available to manufacturer/supplier on request to Certification Body.

 

 

 

Analysis of Test Report and Assessment Report

 

The Certification Committee scrutinizes the test & assessment reports and recommends for approval to Certification Body ensuring technical and procedural conformance with the requirements. However, if any non-conformity is observed in the above, the Certification body advise to the manufacturer to carry out corrective actions or submit the fresh samples for testing to the extent of non-conformance observed.

 

 

Grant of Certification of Approval

 

The decision regarding certification of a Smart card product / Microelectronics module Product of a manufacturer or otherwise shall be taken by Certification Committee. Following the committee decision to grant certificate, the certificate of approval will be signed by Head (Smart card product Certification Body). The manufacturer is conveyed for successful completion of processing of his application and grant of certification.

 

FOLLOW UP AND SURVEILLANCE ARRANGEMENTS INCLUDING AUDIT TESTING

 

Once approval has been accorded, the Certification Body is authorized to carry out surveillance (through evaluation of annual statement of compliance with criteria and requirements and documents evaluation of the supplier/manufacturer)

 

Through these surveillance the Certification body satisfies itself that the manufacturer’s quality system is consistently within the requirements of the scheme.

 

Audit testing is normally carried out by CB in the test labs at least once in a year.

 

VALIDITY OF CERTIFICATE

 

The approval is granted initially for one year and is renewed annually subject to demonstrating compliance with the requirements.

 

Need of Re-Certification:

 

Any change after Certification, in any of the components listed below, will be treated as Major Nonconformity and will require re-certification,

  • Operating System of Smart card product / Microelectronics module or its Version.
  • Microprocessor Chip (Integrated Circuit) Module (its Make, Model or Technical             Architecture).

 

CONFIDENTIALITY

 

The Certification Body ensures confidentiality of information obtained in the course of certification activities at all levels of its organization including committees and subcommittees, unless otherwise required by law.

 

RENEWAL OF CERTIFICATE

 

The Approval shall be valid for a period one year subject to the provisions of the Scheme. The Certification Body shall issue a renewal notice to the approved manufacturer before the expiry of the current validity period or display the renewal notice on the website http://www.parivahan.nic.in & http://www.mnic.gov.in. The Certification Body may, at its discretion, decide for any one of the following actions:

·    renewal of the certificate based on surveillance reports of the current validity period;

·    renewal after partial assessment/testing;

·    renewal after complete assessment/testing;

·    reject the renewal request after assigning reasons.

 

SUSPENSION OF CERTIFICATE

 

Certificate may be suspended for a limited period at the discretion of Certification Body under any of the following circumstance:

·   If the surveillance (or audit/Renewal testing) indicates minor non-conformance to the and the   requirements same is not settled even after lapse of initial time period given for corrective actions.

·   If the surveillance (or audit/Renewal testing) indicates major non-conformance during   testing and/or surveillance visit but immediate withdrawal is not considered necessary.

·   Failure of manufacturer to notify any major design changes in the product or change in standard/sources of critical components.

·   If improper use of the approval is not rectified to the satisfaction of Certification Body.

·   If there has been any other contravention of the applicable requirements or rules of procedures of the scheme.

 

An official suspension is confirmed by the Certification Body through a registered letter to the manufacturer or by equivalent means and indicates the conditions under which suspension will be revoked. The Certification Body may publish notification of suspension. Upon fulfillment of indicated conditions within the specified period, the Certification Body shall revoke suspension and notify the manufacturer accordingly. Otherwise, the approval shall be withdrawn.

 

WITHDRAWAL OF APPROVAL

 

The Certification body shall withdraw the approval under any of the following circumstances:

·   If the manufacturer remains under suspension for six months continuously for persistent non-conformance to the requirements of the scheme;

·   If the manufacturer either will not or cannot ensure conformance to changed rules of   procedure of the Scheme;

·   If the surveillance (or audit testing) indicates that non-conformance to the requirements  is of serious nature;

·   If the manufacturer ceases to produce the product;

·   If the manufacturer fails to meet the financial obligations to Certification Body;

·   At the formal request of the manufacturer;

·   Any other serious contravention of applicable requirements of rules of procedures of   the scheme.

 

The official communication by the Certification Body of the withdrawal shall be either through a registered letter or equivalent means. The Certification Body may publish notification of the withdrawal of approval.

 

LIABILITY

 

The approval given shall not be regarded as in any way diminishing the normal contractual responsibilities/obligations between the manufacturer and the buyer. While the approval will normally be a sound indicator of the competence of the manufacturer to produce Smart card product / Microelectronics module conforming to certification body requirements, it should not be taken as any sort of guarantee accorded by the Certification Body. The Certification Body or the test laboratories will not be liable for any damage/loss caused to anyone on account of malfunctioning of the item or otherwise for which approval is given. The manufacturer will ensure manufacture of safe products and is fully responsible for any damage/loss etc. caused to anyone on account of the usage of the item.

 

COMPLAINTS/APPEALS

 

Complaints

Complaint from user against the manufacturer:

·         User is expected to interact with manufacturer for rectification of his grievance.

·         If the matter remains unresolved, user can make a formal complaint to Certification   Body. Certification Body is expected to resolve the issue expeditiously but within three  months.

 

Complaint from manufacturer against Certification Body.

 

If manufacturer disagrees with a decision related to assessment, testing, interpretation of

standard etc., he can discuss his views (without jeopardizing future decisions) with Director (Smart card product  Certification), Certification Body.

 

If the matter still remains unresolved, the manufacturer can make a formal complaint in to the Head (Smart card product and Microelectronics module Product Certification Body). Who is supposed to resolve the issue expeditiously, but within three months.

 

Appeal

If the matter still persists, then a formal appeal can be made to DG, NIC who in turn, would appoint a three member committee. Two members each, at least, of such committee shall be acceptable to both sides. Decision of DG, NIC would be final and binding to both the parties. All dealings/correspondence in respect of appeals are strictly confidential.

 

 

 

Annexure – I

 

Smart card product  and Microelectronics module specifications for MNIC,DL, RC, RTO cards, endorsing authority cards, reviewing authority cards, key generation authorities cards etc.

a) Microprocessor based IC card with contacts and with a minimum of

    4kbyte for DL/RC application and 16kbyte for MNIC application available on E 2PROM

b) Compliant to ISO/IEC 7816-1,2 &3

c) Compliant to SCOSTA v1.2b dated March 15, 2002, including all addendums and errata including the latest of dated 1st July 2006

d) Supply voltage 3V nominal

e) T=0 or T=1 transport protocol

f)  Min 10 years data retention

g) Min 300,000 E2PROM write cycles

h) Operating ambient temperature range –25C to +55 Deg C

i)  Glossy surface, PVC/ABS plastic construction with overlay to allow color dye

    Sublimation printing

j) Smart card product and Microelectronics modules must have data objects for card sequence no (Tag 5F34) and cards primary account no (Tag 5A) at the MF level as per ISO 7816-6. Once   programmed these data objects can not be changed.

k) The card must be Non-initialized SCOSTA card