Product Registration Questionnaire: SBMP Product Providers
Extracted document text
EMVCo's index flattens the document's layout, so this text is best used for searching and comparing versions rather than reading end-to-end.
Instructions : P lease complete all sections. Each SBMP product configuration ( e.g. HW platform , OS version) must be submitted on separate forms . F or additional instructions refer to the attached Registration Questionnaire Instructions . Return completed Pr oduct Registration Questionnaire , as a PDF , by email to the EMVCo Security Evaluation Secretariat. Email : sbmpsecurity@emvco.com 1. General Information : Company Name: FORMTEXT Security Lab oratory Name: FORMTEXT Subcontracting Security Lab oratory( ies ) Name (s) if any : FORMTEXT FORMTEXT 2. Type of E valuation : New product evaluation FORMCHECKBOX For lineal product , please provide parent SECN: FORMTEXT Update evaluation FORMCHECKBOX Please provide SE CN: FORMTEXT Changes have a security impact: Yes (delta) FORMCHECKBOX No (derivative) FORMCHECKBOX Product or component already issued in the field: Yes FORMCHECKBOX No FORMCHECKBOX Renewal evaluation FORMCHECKBOX Please provide SE CN: FORMTEXT 3 . Product Information : EMVCo considers a n SBMP product to be made up of several components . 3.1 Product I dentification : Product name: FORMTEXT Product version : FORMTEXT Product components: ( check below as appropriate) Mobile Application / related SDK FORMCHECKBOX Hardware solution providing Trusted Execution Environment ( e.g. TEE, TPM, (e)SE) FORMCHECKBOX Virtual Trusted Execution Environment FORMCHECKBOX Mechanism for providing a CDCVM ( e.g. Biometrics) FORMCHECKBOX Attestation m echanism FORMCHECKBOX Software Protection Tool: Obfuscation White-box Crypto Device Binding Root Detection Anti-Instrumentation Tamper Detection Anti-Emulation FORMCHECKBOX FORMCHECKBOX FORMCHECKBOX FORMCHECKBOX FORMCHECKBOX FORMCHECKBOX FORMCHECKBOX 3.2 Component details : Component type : FORMTEXT Component name: FORMTEXT Component version : FORMTEXT Component Provider name : FORMTEXT SECN detail (if applicable) : FORMTEXT Component type: FORMTEXT Component name: FORMTEXT Component version : FORMTEXT Component Provider name : FORMTEXT SECN detail (if applicable) : FORMTEXT Component type: FORMTEXT Component name: FORMTEXT Component version : FORMTEXT Component Provider name : FORMTEXT SECN detail (if applicable) : FORMTEXT 3. 3 User Guidance D etail: Please provide references and versions of all User security guidance documents applicable to the product a nd/or to its components : Document(s) reference / version: FORMTEXT FORMTEXT FORMTEXT FORMTEXT FORMTEXT FORMTEXT FORMTEXT 4. EMVCo Payment Systems: Please check in the list below the EMVCo member Payment System(s) to be provided access to the security evaluation report: American Express FORMCHECKBOX JCB FORMCHECKBOX UnionPay FORMCHECKBOX Discover FORMCHECKBOX Mastercard FORMCHECKBOX Visa FORMCHECKBOX 5 . Contact Information : Contact Name: FORMTEXT Contact email: FORMTEXT Date Completed: FORMTEXT 6 . Authorized b y: Name: FORMTEXT E mail: FORMTEXT Date Authorized: FORMTEXT Instruction s for SBMP Product Registration Questionnaire 1. General Information: Company Name: Enter the name of the company that has registered with EMVCo as a SBMP Product provider Security Laboratory Name: Enter the name of the Security Evaluation Laboratory you plan to use for the security evaluation of your product and if evaluation parts are subcontracted to other Security Evaluation Laboratories they shall be listed as Subcontracting Security Laboratories. 2. Type of evaluation: Indicate if the questionnaire is for a new SBMP Product , for a renewal , or provides information about changes that have been made to a previously approved SBMP Product . SBMP products or components are often developed in a line structure. The first evaluation is performed on an initial ‘parent’ product which then constitutes the basis for the evaluation of the product line. Products or components from the same line will be granted the certificate number of the parent product and identified through an extension to this number . When applicable, please provide the reference SE CN number assigned by EMVCo. In the case of an update, indicate whether the product or component has been issued to the field or not (if so an extended SECN number will be assigned). 3.1 Product identification: Enter the product name and version uniquely identifying the product, to be used by EMVCo for the evaluation certificate and the components constituting the product (the declared product can be made of the integration of several components that can be previously evaluated or not) . 3 .2 Product Components : Enter each component type, n ame and version, the name of the component provider company, and the SE CN details assigned by EMVCo to the component , if any . 3 .3 User Guidance Detail: Enter the name of the document(s) that provide(s) security guidance to the product users to remain within the scope of the E valuated P roduct configuration. 4. EMVCo Payment Systems: For "Common r eports", please specify which of the EMVCo member Payment Systems you wish to allow to receive a copy of the security evaluation report. For EMVCo "M ember s pecific r eports", please check the corresponding Payment System name. The Security Evaluation Laboratory will encrypt the report package and send to the appropriate recipients. 5 . Contact Information: Enter the name and email of the person EMVCo should contact if there are any questions related to the information provided on the questionnaire. Please enter the date the questionnaire was completed. 6 . Authorized By: Enter the name of the person that authorizes the testing of the product detailed in the questionnaire . Your SBMP product will be listed on the Evaluated Products list that is posted to the EMVCo website. Please refer to the SBMP Security Evaluation Process document for further details.