Hardware and software: tested security from a single source

With its evaluation body for IT security, TÜVIT is one of the world's leading providers of testing services for IT products and systems. The evaluation body has been recognized by the German Federal Office for Information Security (BSI) since 1991.

Perfect lineup

The framework conditions for the evaluation and measurement methods are determined either by international standards and specifications, such as Common Criteria, FIPS PUB 140-3, as well as specifications of the national and international credit services sector (EMVCo, Die Deutsche Kreditwirtschaft (The German Banking Industry Committee)).

If required, we agree the framework conditions individually with you. Our evaluation body for IT security is set up in accordance with the best available technology.

Our services at a glance

CC evaluations of IT products and systems in all evaluation levels
support for the preparation of security specifications and evidence documentation
workshops on the security criteria and the evaluation scope
review of possible evaluation procedures
conduct of trainings, including training in criteria and attack methods

Approval

German Federal Office for Information Security
- 94 KB
- PDF

Our evaluation body covers the following topics

operating systems
security controller
database management systems
network devices (e.g. firewalls, VPN solutions, routers)
payment systems (smartcard components), software and hardware evaluations, payment applications
mobile systems, e.g. smartphones
communication systems
smart meter gateways (with conformity test for TR-03109)
signature applications
smartcard terminals
government applications (e.g. passport, identity card, eHealth)
combined systems, e.g. operating system + applications
smart cards
smart card operating systems and applications
hardware security modules
security controller

Your benefits at a glance

we have more than 20 years of experience with globally recognized evaluations of security-critical IT products and systems. As a result, we are able to offer you the best evaluation approach in each case
TÜVIT is one of the few providers to test both hardware and software
your critical values are provided with the best possible protection: We use the strongest attack techniques that are currently available on the market
our IT security experts have outstanding know-how

Project examples

Evaluation of

smart card security controllers of various IC manufacturers
payment applications for EMVCo and its members
mobile payment applications
smart card operating systems (signature, payment, passport, health)
Java Card systems
complex software products such as database and network systems

Contact Send mail

Marc Le GuinDirector Evaluation Body for IT Security

Tel.: +49 201 8999 639
securitylab@tuvit.de

Common Criteria

Globally-recognized security evaluations for IT components, products and systems: TÜVIT is one of the world's leading testing service providers for Common Criteria. With our 50 licensed evaluators, we have successfully completed over 600 evaluation projects according to CC (from EAL1 to EAL7).

Hardware

Hardware tests for more security: Hardware security modules or chip cards are used for the protection of sensitive data. TÜVIT evaluates these IT products and their components in accordance with recognized international security standards and performs the necessary penetration tests in its own hardware test laboratory.

Software

Making software subsequently secure is always complicated and expensive. This is why it is important to consider the subject of IT security at the beginning and throughout the entire life cycle within the framework of a Common Criteria (CC) evaluation.

Site Certification

Audit of development and production environments: If IT products are certified in accordance with the Common Criteria IT security standard or EMVCo, audits of development and production environments represent an integral part of the evaluation process. For many years now, TÜVIT has been successfully carrying out site audits for production and development environments.

Technical Guidelines of the BSI

Security for government applications and health data: TÜVIT is recognized by the German Federal Office for Information Security (BSI) as an evaluation body for Technical Guidelines (TR).

FIPS 140-3

Testing of crypto modules and crypto algorithms: The TÜVIT test laboratory is approved by the National Institute of Standards and Technology (NIST, USA) for testing and validation according to FIPS PUB 140-3.

Electronic Payments

Components that are used within electronic payment systems must fulfil specific security standards and require corresponding approvals. TÜVIT performs these approval procedures in its capacity as an accredited security assessor.

FIDO

The FIDO Alliance has developed open standards especially for authentication solutions, allowing manufacturers to objectively demonstrate the security of their products. As a security laboratory accredited by the FIDO Alliance, TÜVIT is entitled to perform corresponding evaluations.

GSMA NESAS

TÜVIT carries out security assessments throughout the entire product life cycle process in accordance with the NESAS standard. This enables us to offer network equipment manufacturers a complete audit and testing portfolio from a single source.