COVID-19 has demanded during this last year, due to the physical limitations of personal travel, the use of video-identification tools to carry out formalities with Public Administrations and private companies. For this reason, in Spain, a series of measures were approved on a transitory and exceptional basis in March 2020, enabling a remote identification system for obtaining a qualified certificate Finally, these measures have been settled in a regulation that came into force in May 2021 which also provides for the security requirements to be met by these products.
What security requirements must a video identification tool meet?
The ministerial order establishes that, in order to adapt in an agile way to the continuous advance of technology, the verification of the security level of the video identification system or product has to follow the requirements of annex F.11 (Video identification tools) of the Taxonomy of STIC products regarding the ICT Security Guide CCN-STIC-140, of the CCN (Spanish National Cryptologic Center) of high category.
The fundamental security requirements that a video identification solution must meet in order to be included in the CPSTIC catalog are as follows:
How to include a video identification product in the CPSTIC catalog?
There are two certifications that allow access to the catalog, LINCE and Common Criteria. This is the reference Catalog for Cybersecurity ICT Products in Spain:
Evaluating a video identification solution
At jtsec we are in the process of evaluating a video identification product under the LINCE methodology, , thus being pioneers in evaluating this family of products. As a leading laboratory in LINCE evaluations, our experience and training will help you to make the certification process as agile as possible, thus reducing the time and resources required by our customers.
If you want to obtain a valid cybersecurity certification for your video identification tool, we will be happy to help you.
