What is BS EN 419241-2about?

BS EN 419241-2 discusses trustworthy systems supporting server signing. BS EN 419241-2 is the second part of the BS EN 419241 series of standards that specifies a protection profile for a Signature Activation Module (SAM), which is aimed to meet the requirements of a QSCD as specified in Regulation (EU) No 910/2014 [eIDAS].

Who is BS EN 419241-2 for?

BS EN 419241-2 on connectors for electronic equipment is useful for:

IT professionals
Solution architects
Solution designers
IT procurement decision-makers
Business analysts
Business owners
Software developers and testers

Why should you use BS EN 419241-2?

A trustworthy system supporting server signing (TW4S) is a system that offers remote digital
signatures as a service. It ensures that signer’s signing key or keys are only used under the sole
control of the signer for the intended purpose.

The TOE is a software component, which implements the Signature Activation Protocol (SAP). It
is either deployed within the tamper protected part of the Cryptographic Module or alternatively in a dedicated tamper-protected environment, that is connected to the Cryptographic Module via a trusted channel. It uses the Signature Activation Data (SAD) from the signer to activate the corresponding signing key for use in a Cryptographic Module. Together the TOE and Cryptographic Module are a QSCD.

The TW4S uses a Cryptographic Module to generate the signing key and create the digital signature value. ISO/TS 16175-2 identifies and defines the security objectives for the TOE and its operational environment. These security objectives reflect the stated intent, counter the identified threats, and take into account the assumptions.

BS EN 419241-2:2019

Trustworthy Systems Supporting Server Signing - Protection profile for QSCD for Server Signing

Current, Under Review

Published:

31 Mar 2019