TY - CHAP A1 - Heiner, Monika A1 - Heisel, Maritta A1 - Hatebur, Denis A1 - Rottke, Thomas ED - Anderson, Stuart T1 - A Problem-Oriented Approach to common Criteria Certification T2 - Computer safety, reliability and security, 21st international conference, SAFECOMP 2002, Catania, Italy, September 10 - 13, 2002 N2 - Abstract. There is an increasing demand to certify the security of systems according to the Common Criteria (CC). The CC distinguish several evaluation assurance levels (EALs), level EAL7 being the highest and requiring the application of formal techniques. We present a method for requirements engineering an (semi-formal and formal) modeling of systems to be certified according to the higher evaluation assurance levels of the CC. The method is problem oriented, i.e. it is driven by the environment in which the system will operate and by a mission statement. We illustrate our approach by an industrial case study, namely an electronic purse card (EPC) to be implemented on a Java Smart Card. As a novelty, we treat the mutual asymmetric authentication of the card an the terminal into which the card is inserted. Y1 - 2002 SN - 3-540-44157-3 SP - 334 EP - 346 PB - Springer CY - Berlin [u.a.] ER -