innovation for industry
Leti, a CEA Tech institute, is home to an IT security evaluation center (CESTI) approved by France's national IT security administration. The center recently completed its first EAL6+ certification of a complete circuit, helping the manufacturer boost the product's security.
electronic systems and circuits—think passports and banking applications—must
be certified for resistance to security attacks to ensure that they
sufficiently protect the data they contain. Without certification, these
products cannot be sold. In France, evaluations are conducted by IT security
evaluation centers (CESTI) that use the Common Criteria for Information
Technology Security Evaluation. Leti, a CEA Tech institute, is home to one of
these evaluation centers (CESTI Leti).
first time ever, CESTI Leti recently granted EAL6+ certification (the
second-highest security level) to a complete product, a Samsung secure
microcontroller. The certification was validated by France’s national IT
security agency, ANSSI, officially positioning CESTI Leti to perform security
evaluations for the most demanding applications.
CESTI Leti also
operates outside of the scope of France’s certification scheme. The center
recently earned recognition as an official evaluation laboratory for the new NXP-MIFARE
certification system. MIFARE is one of the most commonly-used contactless IC
technologies. And CESTI Leti is also applying to become a GlobalPlatform® accredited laboratory.
certifications and accreditations give CESTI Leti the capacity to respond to a
very wide range of IT and systems security requests.
CEA is a French government-funded technological research organisation in four main areas: low-carbon energies, defense and security, information technologies and health technologies. A prominent player in the European Research Area, it is involved in setting up collaborative projects with many partners around the world.