- Certification Scheme
CombICAO v3.1 on Cosmo X² (EAC with PACE for French ID Configuration)
The evaluated product is a "smart card" type device that can be used in two modes: contact and contactless.
It implements electronic travel document functions in accordance with the specifications of the International Civil Aviation Organization (ICAO). This product is designed to verify the authenticity of the travel document and identify its holder during border control, using an inspection system. This microcontroller and its embedded software are intended to be inserted into the cover of traditional passports, into an eCover, or into an eDatapage. The final product can take various forms, such as a card or a module.
Details of the Certificate
| Certificate ID | CERTIFICATE EUCC-3090-2026-05 |
| Name of Product | CombICAO v3.1 on Cosmo X² (EAC with PACE for French ID Configuration) |
| Type of Product | smart card and similar device |
| Version of Product | Applet Code Versions : ’20 38 21 FF’;Applet Internal Version : ’01 03 04 11’ |
| Name of the Holder | IN Smart Identity |
| Address of the Holder | 2 place Samuel de Champlain, 92400 Courbevoie, France |
| Contact Information of the Holder | PSIRT idemia [dot] com (PSIRT[at]idemia[dot]com) |
| Website Holder of Certificate with Supplementary Cybersecurity Information | https://ingroupe.com/product/combicao/ |
| Name of the certification body that issued the certificate | ANSSI |
| NANDO ID of the CB | 3090 |
| Address of the certification body that issued the certificate | Secrétariat général de la défense et de la sécurité nationale, Agence nationale de la sécurité des systèmes d’information 51, boulevard de La Tour-Maubourg, 75700 PARIS 07 SP |
| Contact information of the certification body that issued the certificate | certification ssi [dot] gouv [dot] fr (certification[at]ssi[dot]gouv[dot]fr) |
| Name of the ITSEF which performed the evaluation | SERMA SAFETY & SECURITY |
| Responsible NCCA | ANSSI |
| Scheme | (UE) 2024/482 - EUCC |
| Reference to the certification report associated with the certificate referred to in Annex V; | certificate associated with the report EUCC-3090-2026-05 also published on the certification website. |
| Assurance level | High |
| CC Version | ISO/IEC 15408-1:2009, 15408-2:2008 15408-3:2008 |
| CEM Version | ISO/IEC 18045:2009 |
| AVA_VAN Level | 5 |
| Package | EAL5 augmented with ALC_DVS.2, ALC_FLR.3, AVA_VAN.5 |
| Protection Profile | [PP-EACwPACE] : BSI-CC-PP0056-V2-2012-MA-02 |
| Year of issuance | 2026 |
| Month of Issuance | 02 |
| ID of the Certificate (yearly number of certificate issued by the CB) | 5 |
| Modification/ Reassurance plus the ID | N/A |
| Certificate issue date | 18/02/2026 |
| period of validity of the certificate | 5 years |
