Java Logo


 


JAVA CARD PROTECTION PROFILE DOWNLOADS


Java Card technology provides a secure environment for applications that run on smart cards and other devices with very limited memory and processing capabilities. Multiple applications can be deployed on a single card, and new ones can be added to it even after it has been issued to the end user. Java Card also includes a set of unique tools for developing new products.


Getting Started Icon
Getting Started Icon
Java Card
Protection Profile

 
Red Triangle  Java Card Protection Profile
To help creators of products based on Java Card technology meet the demand by banks, governments, and other card issues for security evaluations that comply with rigorous, widely accepted standards, the Java Card Protection Profile provides a modular set of security requirements designed specifically for the characteristics of the Java Card platform. It reduces the time and cost for developers of Java Card-based products to complete security evaluations under the Common Criteria for IT Security Evaluation. This work is part of Oracle's Global Initiative on Common Criteria (CC).
 
A profile defines a set of security requirements for the Java Card Runtime Environment, the Java Card Virtual Machine, the Java Card API Framework, and the on-card Installer components. It provides guidelines to develop a secure Java Card platform and obtain high-level security certifications.

The design strategy behind protection profiles represents a breakthrough in the world of security evaluations, as it specifically accommodates the flexible, modular, and open characteristics of Java Card technology. In Particular, it is intended to complement existing protection profiles available for Java Card technology-based smart cards.
 

Red Triangle DOWNLOAD - Java Card Protection Profile 3.0.5
Java Card Protection Profile version 3.0.5

The Java Card Protection Profile version 3.0.5, is aligned with the Java Card Specifications version 2.2.x, 3.0.1, 3.0.4 and 3.0.5.

This version of the Protection Profile has been certified by BSI (Bundesamt für Sicherheit in der Informationstechnik) to a certification level of CC EAL4+, ALC_DVS.2, AVA_VAN.5 and can be used to reach certification levels of EAL4+ and above for Java Card products. It relies on CC version 3.1 revision 5.

Java Card Protection Profile v3.0.5 Open Configuration is registered under the reference BSI-CC-PP-0099-2017, and applies to evaluations of Java Card - based smart cards or similar devices that support post-issuance downloading of applications. It replaces the Java Card Protection Profile v 3.0 Open Configuration.
Java Card Protection Profile v3.0.5 Closed Configuration is registered under the reference BSI-CC-PP-0101-2018, and applies to evaluations of Java Card products without support for post-issuance downloading of applications. It replaces the Java Card Protection Profile v 3.0 Closed Configuration.
Red Triangle ARCHIVE - Past Protection Profile Releases
Java Card Protection Profile version 3.0

The Java Card Protection Profile 3.0, is aligned with the Java Card Specifications version 2.2.x and 3.0.1. It has been certified by ANSSI (Agence Nationale de la Sécurité des Systemes d'Information) to a certification level of CC EAL4+ and can be used to reach certification levels of EAL4+ and above for Java Card products. This version of the Protection Profile relies on CC version 3.1, revisions 3 and 4.

Java Card Protection Profile version 1.1
 
Left Curve
Embedded Downloads
Right Curve