Vitale 2 applet on ID-One Cosmo for health card
The Carte Vitale is a personal smart card issued by the GIE SESAM VITALE to all beneficiaries of the general scheme. It enables secure identification of the insured and the automation of health data exchanges with healthcare professionals and health insurance organizations. The product to be evaluated is a JavaCard applet embedded on a certified JavaCard platform, which itself runs on a certified IC, along with its associated security mechanisms.
The card is used in a constrained environment, particularly within healthcare information systems (doctor's office, pharmacy, hospital), to ensure the presentation of the insured, the transmission of electronic treatment forms (FSE), and where applicable, authentication in healthcare teleservices. By integrating strong authentication, access management, and sensitive data protection mechanisms, it directly contributes to protecting the privacy of insured people in the processing of their health data.
European Compliance
EU Cybersecurity Certification Scheme on Common Criteria (EUCC)
The European Commission has adopted the Commission Implementing Regulation establishing the EU Cybersecurity Certification Scheme on Common Criteria (EUCC).
The EUCC is the European Union cybersecurity certification scheme for ICT products. It defines harmonized security requirements based on the internationally recognized Common Criteria framework, helping to increase trust in digital products across the EU market. Certificates issued under the EUCC scheme are valid in all EU Member States.
EUCC certification within IN Groupe’s portfolio
IN Groupe’s portfolio includes products certified under the EUCC scheme. Certificates for these products are referenced on the ENISA website, in accordance with EU cybersecurity certification requirements.
For Vitale2 applet on Cosmo X² and Cosmo XE, the support period as described in Article 55 of the regulation (EU) 2019/881 is 3 years from the first Common Criteria certificate of the product. Disclosed vulnerabilities can be consulted there: CERT-FR – Cert national et gouvernemental français.
