PRADOTEC EBA MyKad Reader First Received Technology Security Assurance (TSA) Certification by CyberSecurity Malaysia
Pradotec Sales & Services Sdn Bhd (Pradotec) Enhanced Biometric Access (EBA) MyKad reader with fingerprint scanner – BCR230BT received the Technology Security Assurance (TSA) certification from CyberSecurity Malaysia (CSM) on 17 January 2020. Pradotec is the first and only company that have successfully passed the Mandatory Security Functional Requirement (MSFR) evaluation and received the certification from CSM (Certification No. 2019-02-TSA1903), amongst the three companies that had submitted their devices for valuation and certification in 2018/2019.
In September 26 2018[1], MCMC announced its plan to make Technology Security Assurance (TSA) certification mandatory for all cyber security products in the country. TSA is a national-level scheme under the CyberSecurity Malaysia which offers evaluation and certification services for local ICT products especially the smart card readers in this country. The TSA compliance standard is developed to complement the new MyKad security feature, by protecting the fingerprint template on the chip to prevent MyKad from being counterfeited. Smart Card Reader solution that is TSA complied and certified will benefit businesses especially in the area of verification, digital process and eKYC to strengthen the protection of Personal Identification from cyber-attack.
The compliance aims to enhance the security features on ICT Smart Card Reader products that will deter tampering, manipulation and cloning. Compared the EBA MyKad to the MyKad reader and SDK, the EBA solution comes with security feature that consist of Mutual Authentication and encrypted biometric template, which is a digital reference of a distinct characteristics that is used during biometric authentication process.
As of March 2018[2], Datasonic have been working with JPN on the issuance of a new batch of MyKad with the EBA features. With the issuance of the EBA cards in the near future, upgrades of the readers will be required.
Citation
1. Bernama, 2018, “KKMM Plans to Make Technology Security Assurance Certification Mandatory”, <http://www.bernama.com/en/news.php?id=1646467>
2. Datasonic Group Berhad, 2018, “Datasonic Wins Prestigious Cyber Security Award of The Year”, <https://imejjiwa.com/pressrelease/sep_2018/data_1.pdf>
