Reliable testing of your hardware

Hardware security modules or chip cards are used for the protection of sensitive data, e.g. in the field of credit cards, government documents, the health card and the smartphone.

TÜVIT evaluates these IT products and their components in accordance with recognized international security standards (Common Criteria, EMVCo) and performs the necessary penetration tests in its own hardware test laboratory. TÜVIT has all the necessary accreditations for this purpose.

 

Hardware tests for more security

Security and reliability are indispensable for government documents, infrastructures, trust services and payment transactions. Hardware tests therefore play a critical role here. For this purpose, our hardware security laboratory offers corresponding tests and extensive security analyses. The laboratory is part of the evaluation body for IT security, which is accredited by the German Accreditation Body (DAkkS) in accordance with DIN EN ISO/IEC 17025. TÜVIT is acknowledged by EMVCo as well as its members as a "full service lab" for the security evaluation of hardware components and the corresponding software. In addition, we have been recognized by the German Federal Office for Information Security (BSI) since 1991 as an evaluation body for Common Criteria.  

The framework conditions for the evaluation and measurement methods are determined either by international standards and specifications, such as Common Criteria, FIPS PUB 140-3, as well as specifications of the national and international credit services sector (EMVCo, Die Deutsche Kreditwirtschaft (The German Banking Industry Committee)), or with you individually if required.

Our services at a glance

  • measurements, tests and security analyses according to existing standards and specifications
  • analysis of physical security
  • source code analysis and design review
  • side-channel analysis
    • power analysis (SPA, DPA)
    • electromagnetic emanation analysis (SEMA, DEMA)
    • template attacks
  • fault injection
    • laser fault injection (LFI)
    • voltage and frequency manipulation
    • differential fault analysis (DFA)
    • electromagnetic fault injection (EMFI)

Certificate of recognition

icon_left icon_right
 

Your benefits at a glance

  • we have more than 20 years of experience with globally recognized evaluation of security-critical IT products and systems; as a result, we are able to offer you the best evaluation approach in each case
  • your critical values are provided with the best possible protection: we use the strongest attack techniques that are currently available on the market.
Contact Send mail
Dr. Patrick BödekerHead of Department Hardware Evaluation

Tel.: +49 201 8999-618
Fax: +49 201 8999-666
p.boedeker@tuvit.de

Further services

Evaluation Body for IT Security

With its evaluation body for IT security, TÜVIT is one of the world's leading providers of testing services for IT products and systems. The evaluation body has been recognized by the German Federal Office for Information Security (BSI) since 1991 and accredited by the DAkkS, the German Accreditation Body, according to DIN EN ISO/IEC 17025.
Read more

Common Criteria

Globally-recognized security evaluations for IT components, products and systems: TÜVIT is one of the world's leading testing service providers for Common Criteria. With our 50 licensed evaluators, we have successfully completed over 600 evaluation projects according to CC (from EAL1 to EAL7).
Read more

Software

Making software subsequently secure is always complicated and expensive. This is why it is important to consider the subject of IT security at the beginning and throughout the entire life cycle within the framework of a Common Criteria (CC) evaluation.
Read more

Site Certification

Audit of development and production environments: If IT products are certified in accordance with the Common Criteria IT security standard or EMVCo, audits of development and production environments represent an integral part of the evaluation process. For many years now, TÜVIT has been successfully carrying out site audits for production and development environments.
Read more

Technical Guidelines of the BSI

Security for government applications and health data: TÜVIT is recognized by the German Federal Office for Information Security (BSI) as an evaluation body for Technical Guidelines (TR).
Read more

FIPS 140-3

Testing of crypto modules and crypto algorithms: The TÜVIT test laboratory is approved by the National Institute of Standards and Technology (NIST, USA) for testing and validation according to FIPS PUB 140-3.
Read more

Electronic Payments

Components that are used within electronic payment systems must fulfil specific security standards and require corresponding approvals. TÜVIT performs these approval procedures in its capacity as an accredited security assessor.
Read more

FIDO

The FIDO Alliance has developed open standards especially for authentication solutions, allowing manufacturers to objectively demonstrate the security of their products. As a security laboratory accredited by the FIDO Alliance, TÜVIT is entitled to perform corresponding evaluations.
Read more

GSMA NESAS

TÜVIT carries out security assessments throughout the entire product life cycle process in accordance with the NESAS standard. This enables us to offer network equipment manufacturers a complete audit and testing portfolio from a single source.
Read more