Publicité
Les langues disponibles
Les langues disponibles
I
I
Notes in accordance with VdS directives2156-2, 2386, 3169-1 and 3169-2
Measures against keyloggers
Individual keyboard: To guarantee protection against keylogging, the standard
program libraries offered for the development environment may not be used for
keyboards. A keyboard function must be implemented, where the key entry infor-
mation is only generated and processed within the application, so that key entries
can not be fed in or read out of the application through the operating system via
an interface.
The requirements outlined above only apply if the locking code of the operating
system is not used.
Scramble individual keyboard: To guarantee adequate protection against
keylogging, even for applications of higher classes (see classification table), an
individual keyboard (see above) must be used, which also re-calculates the arran-
gement of the buttons randomly (scramble function).
Measures against loss of confidentiality smart device
Encrypted storage: The confidentiality of the data stored on the smart device for
the relevant application must be guaranteed. The manufacturer of the application
must ensure this by using specially protected storage areas or a suitable encrypti-
on of the data (e.g. AES). The following always applies: The data should be stored
on the smart device based on the principle of saving as little as possible and only
and much as is currently necessary.
All data that can be called up on the master may only be stored there.
The manufacturer must document the storage areas used and the encryption
process used in the manufacturer documentation.
Integrity protection: For class 3-star: The integrity of the application data stored
on the smart device or transferred must be guaranteed. This must take place
using a suitable and up-to-date checksum function for the data. Data without
integrity must not be processed by the application and must be rejected.
47
EN
Publicité
